<?xml version="1.0" encoding="UTF-8"?>
<updates>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1001</id>
          <title>An update for patchelf is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-01-05"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-44940" id="CVE-2022-44940" title="CVE-2022-44940" type="cve"></reference>
          </references>
          <description>Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.(CVE-2022-44940)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="patchelf" release="1.oe2203sp1" version="0.16.0">
                         <filename>patchelf-0.16.0-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="patchelf-debuginfo" release="1.oe2203sp1" version="0.16.0">
                         <filename>patchelf-debuginfo-0.16.0-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="patchelf-debugsource" release="1.oe2203sp1" version="0.16.0">
                         <filename>patchelf-debugsource-0.16.0-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="patchelf-debuginfo" release="1.oe2203sp1" version="0.16.0">
                         <filename>patchelf-debuginfo-0.16.0-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="patchelf-debugsource" release="1.oe2203sp1" version="0.16.0">
                         <filename>patchelf-debugsource-0.16.0-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="patchelf" release="1.oe2203sp1" version="0.16.0">
                         <filename>patchelf-0.16.0-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1002</id>
          <title>An update for rubygem-dalli is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Low</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4064" id="CVE-2022-4064" title="CVE-2022-4064" type="cve"></reference>
          </references>
          <description>A vulnerability was found in Dalli. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The name of the patch is 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to apply a patch to fix this issue. VDB-214026 is the identifier assigned to this vulnerability.(CVE-2022-4064)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="rubygem-dalli-doc" release="2.oe2203sp1" version="3.2.2">
                         <filename>rubygem-dalli-doc-3.2.2-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-dalli" release="2.oe2203sp1" version="3.2.2">
                         <filename>rubygem-dalli-3.2.2-2.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1003</id>
          <title>An update for ruby is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-33621" id="CVE-2021-33621" title="CVE-2021-33621" type="cve"></reference>
          </references>
          <description>The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.(CVE-2021-33621)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="rubygem-psych" release="128.oe2203sp1" version="3.3.2">
                         <filename>rubygem-psych-3.3.2-128.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby-debugsource" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-debugsource-3.0.3-128.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-test-unit" release="128.oe2203sp1" version="3.3.7">
                         <filename>rubygem-test-unit-3.3.7-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-3.0.3-128.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby-devel" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-devel-3.0.3-128.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rss" release="128.oe2203sp1" version="0.2.9">
                         <filename>rubygem-rss-0.2.9-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-bigdecimal" release="128.oe2203sp1" version="3.0.0">
                         <filename>rubygem-bigdecimal-3.0.0-128.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygems" release="128.oe2203sp1" version="3.2.32">
                         <filename>rubygems-3.2.32-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-minitest" release="128.oe2203sp1" version="5.14.2">
                         <filename>rubygem-minitest-5.14.2-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-json" release="128.oe2203sp1" version="2.5.1">
                         <filename>rubygem-json-2.5.1-128.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rake" release="128.oe2203sp1" version="13.0.3">
                         <filename>rubygem-rake-13.0.3-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rexml" release="128.oe2203sp1" version="3.2.5">
                         <filename>rubygem-rexml-3.2.5-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-bundler" release="128.oe2203sp1" version="2.2.32">
                         <filename>rubygem-bundler-2.2.32-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-typeprof" release="128.oe2203sp1" version="0.15.2">
                         <filename>rubygem-typeprof-0.15.2-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygems-devel" release="128.oe2203sp1" version="3.2.32">
                         <filename>rubygems-devel-3.2.32-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-io-console" release="128.oe2203sp1" version="0.5.7">
                         <filename>rubygem-io-console-0.5.7-128.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-power_assert" release="128.oe2203sp1" version="1.2.0">
                         <filename>rubygem-power_assert-1.2.0-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby-debuginfo" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-debuginfo-3.0.3-128.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-did_you_mean" release="128.oe2203sp1" version="1.5.0">
                         <filename>rubygem-did_you_mean-1.5.0-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rdoc" release="128.oe2203sp1" version="6.3.3">
                         <filename>rubygem-rdoc-6.3.3-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="ruby-help" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-help-3.0.3-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rbs" release="128.oe2203sp1" version="1.4.0">
                         <filename>rubygem-rbs-1.4.0-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="ruby-irb" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-irb-3.0.3-128.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-openssl" release="128.oe2203sp1" version="2.2.1">
                         <filename>rubygem-openssl-2.2.1-128.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby-devel" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-devel-3.0.3-128.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-bigdecimal" release="128.oe2203sp1" version="3.0.0">
                         <filename>rubygem-bigdecimal-3.0.0-128.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-3.0.3-128.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-psych" release="128.oe2203sp1" version="3.3.2">
                         <filename>rubygem-psych-3.3.2-128.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby-debuginfo" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-debuginfo-3.0.3-128.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby-debugsource" release="128.oe2203sp1" version="3.0.3">
                         <filename>ruby-debugsource-3.0.3-128.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-io-console" release="128.oe2203sp1" version="0.5.7">
                         <filename>rubygem-io-console-0.5.7-128.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-openssl" release="128.oe2203sp1" version="2.2.1">
                         <filename>rubygem-openssl-2.2.1-128.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-json" release="128.oe2203sp1" version="2.5.1">
                         <filename>rubygem-json-2.5.1-128.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1004</id>
          <title>An update for python-setuptools is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-40897" id="CVE-2022-40897" title="CVE-2022-40897" type="cve"></reference>
          </references>
          <description>Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.(CVE-2022-40897)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python-setuptools" release="5.oe2203sp1" version="59.4.0">
                         <filename>python-setuptools-59.4.0-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python-setuptools-help" release="5.oe2203sp1" version="59.4.0">
                         <filename>python-setuptools-help-59.4.0-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-setuptools" release="5.oe2203sp1" version="59.4.0">
                         <filename>python3-setuptools-59.4.0-5.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1008</id>
          <title>An update for libtar is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-33640" id="CVE-2021-33640" title="CVE-2021-33640" type="cve"></reference>
          </references>
          <description>After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t-&gt;th_buf) . As a result, the released memory is used (use-after-free).(CVE-2021-33640)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libtar-debuginfo" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-debuginfo-1.2.20-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtar-debugsource" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-debugsource-1.2.20-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtar-help" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-help-1.2.20-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtar-devel" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-devel-1.2.20-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtar" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-1.2.20-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtar-help" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-help-1.2.20-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtar-devel" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-devel-1.2.20-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtar" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-1.2.20-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtar-debugsource" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-debugsource-1.2.20-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtar-debuginfo" release="22.oe2203sp1" version="1.2.20">
                         <filename>libtar-debuginfo-1.2.20-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1009</id>
          <title>An update for ImageMagick is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-32547" id="CVE-2022-32547" title="CVE-2022-32547" type="cve"></reference>
          </references>
          <description>In ImageMagick, there is load of misaligned address for type &#39;double&#39;, which requires 8 byte alignment and for type &#39;float&#39;, which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior.(CVE-2022-32547)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="ImageMagick-perl" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-perl-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-help" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-help-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++-devel" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-c++-devel-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debugsource" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-debugsource-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-devel" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-devel-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-c++-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debuginfo" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-debuginfo-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debuginfo" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-debuginfo-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++-devel" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-c++-devel-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-devel" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-devel-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-perl" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-perl-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-c++-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-help" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-help-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debugsource" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-debugsource-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1010</id>
          <title>An update for net-snmp is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-44793" id="CVE-2022-44793" title="CVE-2022-44793" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-44792" id="CVE-2022-44792" title="CVE-2022-44792" type="cve"></reference>
          </references>
          <description>handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.(CVE-2022-44793) handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.(CVE-2022-44792)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="noarch" name="net-snmp-help" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-help-5.9.1-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="net-snmp-debugsource" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-debugsource-5.9.1-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="python3-net-snmp" release="5.oe2203sp1" version="5.9.1">
                         <filename>python3-net-snmp-5.9.1-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="net-snmp-gui" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-gui-5.9.1-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="net-snmp-debuginfo" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-debuginfo-5.9.1-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="net-snmp" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-5.9.1-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="net-snmp-perl" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-perl-5.9.1-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="net-snmp-devel" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-devel-5.9.1-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="net-snmp-libs" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-libs-5.9.1-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="net-snmp-debuginfo" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-debuginfo-5.9.1-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="net-snmp-perl" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-perl-5.9.1-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="net-snmp-devel" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-devel-5.9.1-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="net-snmp-debugsource" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-debugsource-5.9.1-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="python3-net-snmp" release="5.oe2203sp1" version="5.9.1">
                         <filename>python3-net-snmp-5.9.1-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="net-snmp-libs" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-libs-5.9.1-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="net-snmp-gui" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-gui-5.9.1-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="net-snmp" release="5.oe2203sp1" version="5.9.1">
                         <filename>net-snmp-5.9.1-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1015</id>
          <title>An update for ppp is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4603" id="CVE-2022-4603" title="CVE-2022-4603" type="cve"></reference>
          </references>
          <description>** DISPUTED ** A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is still doubted at the moment. The name of the patch is a75fb7b198eed50d769c80c36629f38346882cbf. It is recommended to apply a patch to fix this issue. VDB-216198 is the identifier assigned to this vulnerability. NOTE: pppdump is not used in normal process of setting up a PPP connection, is not installed setuid-root, and is not invoked automatically in any scenario.(CVE-2022-4603)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="ppp-help" release="3.oe2203sp1" version="2.4.9">
                         <filename>ppp-help-2.4.9-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ppp" release="3.oe2203sp1" version="2.4.9">
                         <filename>ppp-2.4.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ppp-devel" release="3.oe2203sp1" version="2.4.9">
                         <filename>ppp-devel-2.4.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ppp-debugsource" release="3.oe2203sp1" version="2.4.9">
                         <filename>ppp-debugsource-2.4.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ppp-debuginfo" release="3.oe2203sp1" version="2.4.9">
                         <filename>ppp-debuginfo-2.4.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ppp-debugsource" release="3.oe2203sp1" version="2.4.9">
                         <filename>ppp-debugsource-2.4.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ppp-debuginfo" release="3.oe2203sp1" version="2.4.9">
                         <filename>ppp-debuginfo-2.4.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ppp" release="3.oe2203sp1" version="2.4.9">
                         <filename>ppp-2.4.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ppp-devel" release="3.oe2203sp1" version="2.4.9">
                         <filename>ppp-devel-2.4.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1019</id>
          <title>An update for samba is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-37966" id="CVE-2022-37966" title="CVE-2022-37966" type="cve"></reference>
          </references>
          <description>Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability.(CVE-2022-37966)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libsmbclient" release="5.oe2203sp1" version="4.17.2">
                         <filename>libsmbclient-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwbclient" release="5.oe2203sp1" version="4.17.2">
                         <filename>libwbclient-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-modules" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-modules-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-usershares" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-usershares-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba-dc" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-dc-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-debugsource" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-debugsource-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-test" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-test-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-krb5-printing" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-krb5-printing-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-devel-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-clients" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-clients-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-common" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-common-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-common-tools" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-common-tools-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-bind-dlz" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-bind-dlz-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-debuginfo" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-debuginfo-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-help" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-help-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ctdb" release="5.oe2203sp1" version="4.17.2">
                         <filename>ctdb-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-libs" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-libs-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="samba-pidl" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-pidl-4.17.2-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-provision" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-provision-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwbclient-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>libwbclient-devel-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-client" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-client-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-krb5-locator" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-krb5-locator-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libsmbclient-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>libsmbclient-devel-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba-test" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-test-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-modules" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-modules-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba-dc" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-dc-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libsmbclient" release="5.oe2203sp1" version="4.17.2">
                         <filename>libsmbclient-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwbclient-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>libwbclient-devel-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-debuginfo" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-debuginfo-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-krb5-printing" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-krb5-printing-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-clients" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-clients-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-test" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-test-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-devel-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba-test" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-test-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-krb5-locator" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-krb5-locator-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-provision" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-provision-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-vfs-glusterfs" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-vfs-glusterfs-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-common-tools" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-common-tools-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-client" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-client-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-bind-dlz" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-bind-dlz-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-help" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-help-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libsmbclient-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>libsmbclient-devel-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ctdb" release="5.oe2203sp1" version="4.17.2">
                         <filename>ctdb-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-libs" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-libs-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-debugsource" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-debugsource-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwbclient" release="5.oe2203sp1" version="4.17.2">
                         <filename>libwbclient-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-common" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-common-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-usershares" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-usershares-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1020</id>
          <title>An update for kubernetes is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Low</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-25743" id="CVE-2021-25743" title="CVE-2021-25743" type="cve"></reference>
          </references>
          <description>kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.(CVE-2021-25743)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kubernetes" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-1.20.2-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-client" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-client-1.20.2-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-help" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-help-1.20.2-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-master" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-master-1.20.2-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-node" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-node-1.20.2-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-kubelet" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-kubelet-1.20.2-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-kubeadm" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-kubeadm-1.20.2-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-client" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-client-1.20.2-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-kubelet" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-kubelet-1.20.2-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-node" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-node-1.20.2-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-1.20.2-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-help" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-help-1.20.2-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-master" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-master-1.20.2-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-kubeadm" release="16.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-kubeadm-1.20.2-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1021</id>
          <title>An update for jetty is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-2048" id="CVE-2022-2048" title="CVE-2022-2048" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-2047" id="CVE-2022-2047" title="CVE-2022-2047" type="cve"></reference>
          </references>
          <description>In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.(CVE-2022-2048) In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.(CVE-2022-2047)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="jetty-http2-server" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-http2-server-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-osgi-boot" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-osgi-boot-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-http2-http-client-transport" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-http2-http-client-transport-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-http2-hpack" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-http2-hpack-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-osgi-alpn" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-osgi-alpn-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-javax-websocket-server-impl" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-javax-websocket-server-impl-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-osgi-boot-warurl" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-osgi-boot-warurl-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-jndi" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-jndi-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-alpn-client" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-alpn-client-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-deploy" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-deploy-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-project" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-project-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-start" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-start-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-websocket-client" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-websocket-client-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-http2-common" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-http2-common-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-osgi-boot-jsp" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-osgi-boot-jsp-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-websocket-server" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-websocket-server-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-servlets" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-servlets-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-websocket-servlet" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-websocket-servlet-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-util" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-util-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-jmx" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-jmx-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-webapp" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-webapp-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-httpservice" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-httpservice-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-jspc-maven-plugin" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-jspc-maven-plugin-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-client" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-client-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-fcgi-client" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-fcgi-client-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-spring" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-spring-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-javax-websocket-client-impl" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-javax-websocket-client-impl-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-servlet" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-servlet-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-jsp" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-jsp-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-jstl" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-jstl-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-io" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-io-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-rewrite" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-rewrite-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-security" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-security-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-continuation" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-continuation-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-alpn-server" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-alpn-server-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-ant" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-ant-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-jaspi" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-jaspi-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-websocket-api" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-websocket-api-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-annotations" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-annotations-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-cdi" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-cdi-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-fcgi-server" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-fcgi-server-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-http" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-http-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-plus" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-plus-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-nosql" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-nosql-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-xml" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-xml-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-proxy" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-proxy-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-util-ajax" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-util-ajax-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-http-spi" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-http-spi-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-javadoc" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-javadoc-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-quickstart" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-quickstart-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-maven-plugin" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-maven-plugin-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-server" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-server-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-websocket-common" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-websocket-common-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-unixsocket" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-unixsocket-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-http2-client" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-http2-client-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-jaas" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-jaas-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="jetty-infinispan" release="3.oe2203sp1" version="9.4.16">
                         <filename>jetty-infinispan-9.4.16-3.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1022</id>
          <title>An update for freeradius is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41860" id="CVE-2022-41860" title="CVE-2022-41860" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41861" id="CVE-2022-41861" title="CVE-2022-41861" type="cve"></reference>
          </references>
          <description>When an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.References:https://freeradius.org/security/Upstream fix:https://github.com/FreeRADIUS/freeradius-server/commit/f1cdbb33ec61c4a64a(CVE-2022-41860) A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.References:https://freeradius.org/security/Upstream fix:https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e(CVE-2022-41861)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="freeradius-sqlite" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-sqlite-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-help" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-help-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-devel" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-devel-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-utils" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-utils-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-ldap" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-ldap-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-debuginfo" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-debuginfo-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-mysql" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-mysql-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-freeradius" release="2.oe2203sp1" version="3.0.25">
                         <filename>python3-freeradius-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-debugsource" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-debugsource-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-postgresql" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-postgresql-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-perl" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-perl-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freeradius-krb5" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-krb5-3.0.25-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-mysql" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-mysql-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-freeradius" release="2.oe2203sp1" version="3.0.25">
                         <filename>python3-freeradius-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-devel" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-devel-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-sqlite" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-sqlite-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-postgresql" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-postgresql-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-help" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-help-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-debuginfo" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-debuginfo-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-debugsource" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-debugsource-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-ldap" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-ldap-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-krb5" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-krb5-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-utils" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-utils-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freeradius-perl" release="2.oe2203sp1" version="3.0.25">
                         <filename>freeradius-perl-3.0.25-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1023</id>
          <title>An update for php is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-37454" id="CVE-2022-37454" title="CVE-2022-37454" type="cve"></reference>
          </references>
          <description>The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.(CVE-2022-37454)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="php-enchant" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-enchant-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-odbc" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-odbc-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-mysqlnd" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-mysqlnd-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-snmp" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-snmp-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-ffi" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-ffi-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-pgsql" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-pgsql-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-xml" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-xml-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-gd" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-gd-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-mbstring" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-mbstring-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-process" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-process-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-dba" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-dba-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-tidy" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-tidy-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-common" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-common-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-sodium" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-sodium-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-cli" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-cli-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-fpm" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-fpm-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-debuginfo" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-debuginfo-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-help" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-help-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-bcmath" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-bcmath-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-dbg" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-dbg-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-ldap" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-ldap-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-opcache" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-opcache-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-devel" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-devel-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-intl" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-intl-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-pdo" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-pdo-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-gmp" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-gmp-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-debugsource" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-debugsource-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-soap" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-soap-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="php-embedded" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-embedded-8.0.28-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-odbc" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-odbc-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-bcmath" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-bcmath-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-xml" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-xml-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-tidy" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-tidy-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-embedded" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-embedded-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-mbstring" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-mbstring-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-help" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-help-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-ldap" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-ldap-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-enchant" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-enchant-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-fpm" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-fpm-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-cli" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-cli-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-gd" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-gd-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-debugsource" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-debugsource-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-devel" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-devel-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-gmp" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-gmp-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-mysqlnd" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-mysqlnd-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-sodium" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-sodium-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-pgsql" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-pgsql-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-common" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-common-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-intl" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-intl-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-dba" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-dba-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-dbg" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-dbg-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-debuginfo" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-debuginfo-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-ffi" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-ffi-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-process" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-process-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-snmp" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-snmp-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-soap" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-soap-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-pdo" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-pdo-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="php-opcache" release="1.oe2203sp1" version="8.0.28">
                         <filename>php-opcache-8.0.28-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1024</id>
          <title>An update for python-pillow is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-45199" id="CVE-2022-45199" title="CVE-2022-45199" type="cve"></reference>
          </references>
          <description>Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.(CVE-2022-45199)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python3-pillow-devel" release="3.oe2203sp1" version="9.0.1">
                         <filename>python3-pillow-devel-9.0.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python-pillow-debugsource" release="3.oe2203sp1" version="9.0.1">
                         <filename>python-pillow-debugsource-9.0.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python-pillow-debuginfo" release="3.oe2203sp1" version="9.0.1">
                         <filename>python-pillow-debuginfo-9.0.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-pillow" release="3.oe2203sp1" version="9.0.1">
                         <filename>python3-pillow-9.0.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-pillow-help" release="3.oe2203sp1" version="9.0.1">
                         <filename>python3-pillow-help-9.0.1-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-pillow-tk" release="3.oe2203sp1" version="9.0.1">
                         <filename>python3-pillow-tk-9.0.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-pillow-qt" release="3.oe2203sp1" version="9.0.1">
                         <filename>python3-pillow-qt-9.0.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-pillow" release="3.oe2203sp1" version="9.0.1">
                         <filename>python3-pillow-9.0.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-pillow-qt" release="3.oe2203sp1" version="9.0.1">
                         <filename>python3-pillow-qt-9.0.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-pillow-tk" release="3.oe2203sp1" version="9.0.1">
                         <filename>python3-pillow-tk-9.0.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-pillow-debugsource" release="3.oe2203sp1" version="9.0.1">
                         <filename>python-pillow-debugsource-9.0.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-pillow-debuginfo" release="3.oe2203sp1" version="9.0.1">
                         <filename>python-pillow-debuginfo-9.0.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-pillow-devel" release="3.oe2203sp1" version="9.0.1">
                         <filename>python3-pillow-devel-9.0.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1025</id>
          <title>An update for openvswitch is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-01-13"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4338" id="CVE-2022-4338" title="CVE-2022-4338" type="cve"></reference>
          </references>
          <description>An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.(CVE-2022-4338)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="openvswitch-debugsource" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-debugsource-2.12.4-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openvswitch-devel" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-devel-2.12.4-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openvswitch-help" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-help-2.12.4-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openvswitch" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-2.12.4-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openvswitch-debuginfo" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-debuginfo-2.12.4-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch-debuginfo" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-debuginfo-2.12.4-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-2.12.4-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch-debugsource" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-debugsource-2.12.4-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch-help" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-help-2.12.4-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch-devel" release="2.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-devel-2.12.4-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1026</id>
          <title>An update for vim is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-13"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0049" id="CVE-2023-0049" title="CVE-2023-0049" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0051" id="CVE-2023-0051" title="CVE-2023-0051" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0054" id="CVE-2023-0054" title="CVE-2023-0054" type="cve"></reference>
          </references>
          <description>Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.(CVE-2023-0049)Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.(CVE-2023-0051)Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.(CVE-2023-0054)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="vim-enhanced" release="7.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-common" release="7.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debuginfo" release="7.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-X11" release="7.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debugsource" release="7.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-minimal" release="7.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="noarch" name="vim-filesystem" release="7.oe2203sp1" version="9.0">
                         <filename>vim-filesystem-9.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debuginfo" release="7.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-minimal" release="7.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debugsource" release="7.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-X11" release="7.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-enhanced" release="7.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-common" release="7.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1027</id>
          <title>An update for systemd is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-01-13"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4415" id="CVE-2022-4415" title="CVE-2022-4415" type="cve"></reference>
          </references>
          <description>A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.(CVE-2022-4415)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="systemd-resolved" release="44.oe2203sp1" version="249">
                         <filename>systemd-resolved-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-networkd" release="44.oe2203sp1" version="249">
                         <filename>systemd-networkd-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-nspawn" release="44.oe2203sp1" version="249">
                         <filename>systemd-nspawn-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-udev" release="44.oe2203sp1" version="249">
                         <filename>systemd-udev-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-pam" release="44.oe2203sp1" version="249">
                         <filename>systemd-pam-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-libs" release="44.oe2203sp1" version="249">
                         <filename>systemd-libs-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-debugsource" release="44.oe2203sp1" version="249">
                         <filename>systemd-debugsource-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd" release="44.oe2203sp1" version="249">
                         <filename>systemd-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-debuginfo" release="44.oe2203sp1" version="249">
                         <filename>systemd-debuginfo-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-devel" release="44.oe2203sp1" version="249">
                         <filename>systemd-devel-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-container" release="44.oe2203sp1" version="249">
                         <filename>systemd-container-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="systemd-timesyncd" release="44.oe2203sp1" version="249">
                         <filename>systemd-timesyncd-249-44.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="systemd-help" release="44.oe2203sp1" version="249">
                         <filename>systemd-help-249-44.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-debuginfo" release="44.oe2203sp1" version="249">
                         <filename>systemd-debuginfo-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-udev" release="44.oe2203sp1" version="249">
                         <filename>systemd-udev-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-networkd" release="44.oe2203sp1" version="249">
                         <filename>systemd-networkd-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-pam" release="44.oe2203sp1" version="249">
                         <filename>systemd-pam-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-nspawn" release="44.oe2203sp1" version="249">
                         <filename>systemd-nspawn-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-devel" release="44.oe2203sp1" version="249">
                         <filename>systemd-devel-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-libs" release="44.oe2203sp1" version="249">
                         <filename>systemd-libs-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd" release="44.oe2203sp1" version="249">
                         <filename>systemd-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-container" release="44.oe2203sp1" version="249">
                         <filename>systemd-container-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-resolved" release="44.oe2203sp1" version="249">
                         <filename>systemd-resolved-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-debugsource" release="44.oe2203sp1" version="249">
                         <filename>systemd-debugsource-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="systemd-timesyncd" release="44.oe2203sp1" version="249">
                         <filename>systemd-timesyncd-249-44.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1029</id>
          <title>An update for SDL2 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-01-13"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4743" id="CVE-2022-4743" title="CVE-2022-4743" type="cve"></reference>
          </references>
          <description>A memory leak issue was discovered in SDL2 version &gt;= SDL2-2.0.8See the link below for details:https://github.com/libsdl-org/SDL/pull/6269https://github.com/libsdl-org/SDL/commit/00b67f55727bc0944c3266e2b875440da132ce4b(CVE-2022-4743)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="SDL2-devel" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-devel-2.0.12-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="SDL2-debugsource" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-debugsource-2.0.12-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="SDL2" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-2.0.12-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="SDL2-debuginfo" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-debuginfo-2.0.12-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="SDL2-static" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-static-2.0.12-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="SDL2-devel" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-devel-2.0.12-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="SDL2" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-2.0.12-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="SDL2-debugsource" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-debugsource-2.0.12-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="SDL2-debuginfo" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-debuginfo-2.0.12-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="SDL2-static" release="5.oe2203sp1" version="2.0.12">
                         <filename>SDL2-static-2.0.12-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1033</id>
          <title>An update for byacc is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-01-13"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-33641" id="CVE-2021-33641" title="CVE-2021-33641" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-33642" id="CVE-2021-33642" title="CVE-2021-33642" type="cve"></reference>
          </references>
          <description>No description is available for this CVE.(CVE-2021-33641)No description is available for this CVE.(CVE-2021-33642)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="byacc-debugsource" release="4.oe2203sp1" version="2.0.20210808">
                         <filename>byacc-debugsource-2.0.20210808-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="byacc-debuginfo" release="4.oe2203sp1" version="2.0.20210808">
                         <filename>byacc-debuginfo-2.0.20210808-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="byacc" release="4.oe2203sp1" version="2.0.20210808">
                         <filename>byacc-2.0.20210808-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="byacc-help" release="4.oe2203sp1" version="2.0.20210808">
                         <filename>byacc-help-2.0.20210808-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="byacc-debugsource" release="4.oe2203sp1" version="2.0.20210808">
                         <filename>byacc-debugsource-2.0.20210808-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="byacc-debuginfo" release="4.oe2203sp1" version="2.0.20210808">
                         <filename>byacc-debuginfo-2.0.20210808-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="byacc" release="4.oe2203sp1" version="2.0.20210808">
                         <filename>byacc-2.0.20210808-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1036</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-13"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-2873" id="CVE-2022-2873" title="CVE-2022-2873" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3903" id="CVE-2022-3903" title="CVE-2022-3903" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3108" id="CVE-2022-3108" title="CVE-2022-3108" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3114" id="CVE-2022-3114" title="CVE-2022-3114" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-2196" id="CVE-2022-2196" title="CVE-2022-2196" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-47942" id="CVE-2022-47942" title="CVE-2022-47942" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-47940" id="CVE-2022-47940" title="CVE-2022-47940" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-47943" id="CVE-2022-47943" title="CVE-2022-47943" type="cve"></reference>
          </references>
          <description>An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system.(CVE-2022-2873)An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.(CVE-2022-3903)An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().(CVE-2022-3108)An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference.(CVE-2022-3114)A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn&#39;t need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or past commit 2e7eab81425a(CVE-2022-2196)An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command.(CVE-2022-47942)An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.(CVE-2022-47940)An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.(CVE-2022-47943)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="perf-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.14.2.90.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.14.2.90.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.14.2.90.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1039</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-01-18"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3424" id="CVE-2022-3424" title="CVE-2022-3424" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4662" id="CVE-2022-4662" title="CVE-2022-4662" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-47946" id="CVE-2022-47946" title="CVE-2022-47946" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4842" id="CVE-2022-4842" title="CVE-2022-4842" type="cve"></reference>
          </references>
          <description>A use-after-free flaw was found in the Linux kernel?s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.(CVE-2022-3424)A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.(CVE-2022-4662)An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_uring.c allows an attacker to crash the kernel, resulting in denial of service. finish_wait can be skipped. An attack can occur in some situations by forking a process and then quickly terminating it. NOTE: later kernel versions, such as the 5.15 longterm series, substantially changed the implementation of io_sqpoll_wait_sq.(CVE-2022-47946)A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.(CVE-2022-4842)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-headers" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.15.0.91.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.15.0.91.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.15.0.91.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1044</id>
          <title>An update for git is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-02-01"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-23521" id="CVE-2022-23521" title="CVE-2022-23521" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41903" id="CVE-2022-41903" title="CVE-2022-41903" type="cve"></reference>
          </references>
          <description>Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge. These overflows can be triggered via a crafted `.gitattributes` file that may be part of the commit history. Git silently splits lines longer than 2KB when parsing gitattributes from a file, but not when parsing them from the index. Consequentially, the failure mode depends on whether the file exists in the working tree, the index or both. This integer overflow can result in arbitrary heap reads and writes, which may result in remote code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. There are no known workarounds for this issue.(CVE-2022-23521)Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst` gitattribute. When processing the padding operators, there is a integer overflow in `pretty.c::format_and_pad_commit()` where a `size_t` is stored improperly as an `int`, and then added as an offset to a `memcpy()`. This overflow can be triggered directly by a user running a command which invokes the commit formatting machinery (e.g., `git log --format=...`). It may also be triggered indirectly through git archive via the export-subst mechanism, which expands format specifiers inside of files within the repository during a git archive. This integer overflow can result in arbitrary heap writes, which may result in arbitrary code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. Users who are unable to upgrade should disable `git archive` in untrusted repositories. If you expose git archive via `git daemon`, disable it by running `git config --global daemon.uploadArch false`.(CVE-2022-41903)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="git" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-2.33.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-daemon" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-daemon-2.33.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-debuginfo" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-debuginfo-2.33.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-core" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-core-2.33.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-debugsource" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-debugsource-2.33.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="gitk" release="7.oe2203sp1" version="2.33.0">
                         <filename>gitk-2.33.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-svn" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-svn-2.33.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-gui" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-gui-2.33.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-web" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-web-2.33.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="perl-Git" release="7.oe2203sp1" version="2.33.0">
                         <filename>perl-Git-2.33.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-help" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-help-2.33.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="perl-Git-SVN" release="7.oe2203sp1" version="2.33.0">
                         <filename>perl-Git-SVN-2.33.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-email" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-email-2.33.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-debugsource" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-debugsource-2.33.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-2.33.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-daemon" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-daemon-2.33.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-core" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-core-2.33.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-debuginfo" release="7.oe2203sp1" version="2.33.0">
                         <filename>git-debuginfo-2.33.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1046</id>
          <title>An update for pkgconf is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24056" id="CVE-2023-24056" title="CVE-2023-24056" type="cve"></reference>
          </references>
          <description>In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes.(CVE-2023-24056)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="pkgconf" release="3.oe2203sp1" version="1.8.0">
                         <filename>pkgconf-1.8.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pkgconf-devel" release="3.oe2203sp1" version="1.8.0">
                         <filename>pkgconf-devel-1.8.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pkgconf-debuginfo" release="3.oe2203sp1" version="1.8.0">
                         <filename>pkgconf-debuginfo-1.8.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pkgconf-debugsource" release="3.oe2203sp1" version="1.8.0">
                         <filename>pkgconf-debugsource-1.8.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="pkgconf-help" release="3.oe2203sp1" version="1.8.0">
                         <filename>pkgconf-help-1.8.0-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pkgconf-devel" release="3.oe2203sp1" version="1.8.0">
                         <filename>pkgconf-devel-1.8.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pkgconf-debuginfo" release="3.oe2203sp1" version="1.8.0">
                         <filename>pkgconf-debuginfo-1.8.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pkgconf" release="3.oe2203sp1" version="1.8.0">
                         <filename>pkgconf-1.8.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pkgconf-debugsource" release="3.oe2203sp1" version="1.8.0">
                         <filename>pkgconf-debugsource-1.8.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1047</id>
          <title>An update for libtiff is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48281" id="CVE-2022-48281" title="CVE-2022-48281" type="cve"></reference>
          </references>
          <description>processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., &#34;WRITE of size 307203&#34;) via a crafted TIFF image.(CVE-2022-48281)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libtiff-devel" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debuginfo" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-static" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-tools" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debugsource" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libtiff-help" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-help-4.3.0-24.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debugsource" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debuginfo" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-devel" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-tools" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-static" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1048</id>
          <title>An update for samba is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-38023" id="CVE-2022-38023" title="CVE-2022-38023" type="cve"></reference>
          </references>
          <description>Netlogon RPC Elevation of Privilege Vulnerability.(CVE-2022-38023)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="samba-test" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-test-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libsmbclient-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>libsmbclient-devel-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-modules" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-modules-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwbclient" release="5.oe2203sp1" version="4.17.2">
                         <filename>libwbclient-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-help" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-help-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-usershares" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-usershares-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba-test" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-test-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-common" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-common-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-common-tools" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-common-tools-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba-dc" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-dc-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-debuginfo" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-debuginfo-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-provision" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-provision-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-client" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-client-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwbclient-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>libwbclient-devel-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-bind-dlz" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-bind-dlz-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-devel-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-krb5-locator" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-krb5-locator-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ctdb" release="5.oe2203sp1" version="4.17.2">
                         <filename>ctdb-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libsmbclient" release="5.oe2203sp1" version="4.17.2">
                         <filename>libsmbclient-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-libs" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-libs-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-clients" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-clients-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-krb5-printing" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-krb5-printing-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-debugsource" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-debugsource-4.17.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="samba-pidl" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-pidl-4.17.2-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwbclient-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>libwbclient-devel-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-client" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-client-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-vfs-glusterfs" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-vfs-glusterfs-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-krb5-printing" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-krb5-printing-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-usershares" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-usershares-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-common-tools" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-common-tools-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba-dc" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-dc-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba-test" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-test-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwbclient" release="5.oe2203sp1" version="4.17.2">
                         <filename>libwbclient-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-help" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-help-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-bind-dlz" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-bind-dlz-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libsmbclient" release="5.oe2203sp1" version="4.17.2">
                         <filename>libsmbclient-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba" release="5.oe2203sp1" version="4.17.2">
                         <filename>python3-samba-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libsmbclient-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>libsmbclient-devel-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-krb5-locator" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-krb5-locator-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-clients" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-clients-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-provision" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-dc-provision-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-common" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-common-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-devel" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-devel-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-debugsource" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-debugsource-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-modules" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-winbind-modules-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-test" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-test-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-debuginfo" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-debuginfo-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ctdb" release="5.oe2203sp1" version="4.17.2">
                         <filename>ctdb-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-libs" release="5.oe2203sp1" version="4.17.2">
                         <filename>samba-libs-4.17.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1049</id>
          <title>An update for sudo is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-22809" id="CVE-2023-22809" title="CVE-2023-22809" type="cve"></reference>
          </references>
          <description>In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a &#34;--&#34; argument that defeats a protection mechanism, e.g., an EDITOR=&#39;vim -- /path/to/extra/file&#39; value.(CVE-2023-22809)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="sudo" release="9.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-1.9.8p2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sudo-debuginfo" release="9.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debuginfo-1.9.8p2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sudo-devel" release="9.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-devel-1.9.8p2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sudo-debugsource" release="9.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debugsource-1.9.8p2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="sudo-help" release="9.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-help-1.9.8p2-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo" release="9.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-1.9.8p2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo-debuginfo" release="9.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debuginfo-1.9.8p2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo-debugsource" release="9.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debugsource-1.9.8p2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo-devel" release="9.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-devel-1.9.8p2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1050</id>
          <title>An update for batik is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41704" id="CVE-2022-41704" title="CVE-2022-41704" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-42890" id="CVE-2022-42890" title="CVE-2022-42890" type="cve"></reference>
          </references>
          <description>A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.(CVE-2022-41704)A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.(CVE-2022-42890)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="batik" release="7.oe2203sp1" version="1.10">
                         <filename>batik-1.10-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="batik-help" release="7.oe2203sp1" version="1.10">
                         <filename>batik-help-1.10-7.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1052</id>
          <title>An update for httpd is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-36760" id="CVE-2022-36760" title="CVE-2022-36760" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-37436" id="CVE-2022-37436" title="CVE-2022-37436" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2006-20001" id="CVE-2006-20001" title="CVE-2006-20001" type="cve"></reference>
          </references>
          <description>Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.(CVE-2022-36760)Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.(CVE-2022-37436)A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.(CVE-2006-20001)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="httpd-debugsource" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-debugsource-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="httpd" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="mod_ssl" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_ssl-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mod_session" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_session-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mod_md" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_md-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="httpd-devel" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-devel-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mod_ldap" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_ldap-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="httpd-debuginfo" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-debuginfo-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="mod_proxy_html" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_proxy_html-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="httpd-tools" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-tools-2.4.51-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="httpd-help" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-help-2.4.51-13.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="httpd-filesystem" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-filesystem-2.4.51-13.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd-debuginfo" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-debuginfo-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="mod_proxy_html" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_proxy_html-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="mod_ssl" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_ssl-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd-devel" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-devel-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd-tools" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-tools-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mod_md" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_md-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd-debugsource" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-debugsource-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd" release="13.oe2203sp1" version="2.4.51">
                         <filename>httpd-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mod_ldap" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_ldap-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mod_session" release="13.oe2203sp1" version="2.4.51">
                         <filename>mod_session-2.4.51-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1053</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-20928" id="CVE-2023-20928" title="CVE-2023-20928" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0210" id="CVE-2023-0210" title="CVE-2023-0210" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23559" id="CVE-2023-23559" title="CVE-2023-23559" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4696" id="CVE-2022-4696" title="CVE-2022-4696" type="cve"></reference>
          </references>
          <description>In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel(CVE-2023-20928)A heap overflow bug in ksmbd_decode_ntlmssp_auth_blob in which nt_len can be less than CIFS_ENCPWD_SIZE. This results in a negative blen argument for ksmbd_auth_ntlmv2, where it calls memcpy using blen on memory allocated by kmalloc(blen + CIFS_CRYPTO_KEY_SIZE). Note that CIFS_ENCPWD_SIZE is 16 and CIFS_CRYPTO_KEY_SIZE is 8. We believe this bug can only result in a remote DOS and not privilege escalation nor RCE, as the heap overflow occurs when blen is in range (-8, -1].”Reference:https://securityonline.info/cve-2023-0210-flaw-in-linux-kernel-allows-unauthenticated-remote-dos-attacks/https://www.spinics.net/lists/stable-commits/msg282893.html(CVE-2023-0210)In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.(CVE-2023-23559)There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the IO_WQ_WORK_FILES flag, which signals that the operation won&#39;t use current-&gt;nsproxy, so its reference counter is not increased. This assumption is not always true as calling io_splice on specific files will call the get_uts function which will use current-&gt;nsproxy leading to invalidly decreasing its reference counter later causing the use-after-free vulnerability. We recommend upgrading to version 5.10.160 or above(CVE-2022-4696)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-devel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1058</id>
          <title>An update for tomcat is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-42252" id="CVE-2022-42252" title="CVE-2022-42252" type="cve"></reference>
          </references>
          <description>If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.(CVE-2022-42252)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="noarch" name="tomcat-jsvc" release="29.oe2203sp1" version="9.0.10">
                         <filename>tomcat-jsvc-9.0.10-29.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="tomcat-help" release="29.oe2203sp1" version="9.0.10">
                         <filename>tomcat-help-9.0.10-29.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="tomcat" release="29.oe2203sp1" version="9.0.10">
                         <filename>tomcat-9.0.10-29.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1059</id>
          <title>An update for git is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41953" id="CVE-2022-41953" title="CVE-2022-41953" type="cve"></reference>
          </references>
          <description>Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line. Git GUI has a function to clone repositories. Immediately after the local clone is available, Git GUI will automatically post-process it, among other things running a spell checker called `aspell.exe` if it was found. Git GUI is implemented as a Tcl/Tk script. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable _always includes the current directory_. Therefore, malicious repositories can ship with an `aspell.exe` in their top-level directory which is executed by Git GUI without giving the user a chance to inspect it first, i.e. running untrusted code. This issue has been addressed in version 2.39.1. Users are advised to upgrade. Users unable to upgrade should avoid using Git GUI for cloning. If that is not a viable option, at least avoid cloning from untrusted sources.(CVE-2022-41953)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="git" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-debuginfo" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-debuginfo-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-core" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-core-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-debugsource" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-debugsource-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-daemon" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-daemon-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-help" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-help-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-web" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-web-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-email" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-email-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="perl-Git" release="9.oe2203sp1" version="2.33.0">
                         <filename>perl-Git-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="gitk" release="9.oe2203sp1" version="2.33.0">
                         <filename>gitk-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-svn" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-svn-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="perl-Git-SVN" release="9.oe2203sp1" version="2.33.0">
                         <filename>perl-Git-SVN-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-gui" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-gui-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-daemon" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-daemon-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-core" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-core-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-debuginfo" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-debuginfo-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-debugsource" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-debugsource-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1061</id>
          <title>An update for vim is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0288" id="CVE-2023-0288" title="CVE-2023-0288" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-47024" id="CVE-2022-47024" title="CVE-2022-47024" type="cve"></reference>
          </references>
          <description>Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.(CVE-2023-0288)A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.(CVE-2022-47024)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="vim-common" release="8.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-X11" release="8.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debuginfo" release="8.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debugsource" release="8.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-enhanced" release="8.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-minimal" release="8.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="noarch" name="vim-filesystem" release="8.oe2203sp1" version="9.0">
                         <filename>vim-filesystem-9.0-8.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debuginfo" release="8.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-minimal" release="8.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-X11" release="8.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-common" release="8.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-enhanced" release="8.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debugsource" release="8.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1062</id>
          <title>An update for opusfile is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-47021" id="CVE-2022-47021" title="CVE-2022-47021" type="cve"></reference>
          </references>
          <description>A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.(CVE-2022-47021)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="opusfile" release="5.oe2203sp1" version="0.11">
                         <filename>opusfile-0.11-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="opusfile-devel" release="5.oe2203sp1" version="0.11">
                         <filename>opusfile-devel-0.11-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="opusfile-debuginfo" release="5.oe2203sp1" version="0.11">
                         <filename>opusfile-debuginfo-0.11-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="opusfile-debugsource" release="5.oe2203sp1" version="0.11">
                         <filename>opusfile-debugsource-0.11-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="opusfile-debugsource" release="5.oe2203sp1" version="0.11">
                         <filename>opusfile-debugsource-0.11-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="opusfile-debuginfo" release="5.oe2203sp1" version="0.11">
                         <filename>opusfile-debuginfo-0.11-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="opusfile-devel" release="5.oe2203sp1" version="0.11">
                         <filename>opusfile-devel-0.11-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="opusfile" release="5.oe2203sp1" version="0.11">
                         <filename>opusfile-0.11-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1064</id>
          <title>An update for openssh is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25136" id="CVE-2023-25136" title="CVE-2023-25136" type="cve"></reference>
          </references>
          <description>OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be triggered by an unauthenticated attacker in the default configuration. One third-party report states &#34;remote code execution is theoretically possible.&#34;(CVE-2023-25136)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="pam_ssh_agent_auth" release="4.18.oe2203sp1" version="0.10.4">
                         <filename>pam_ssh_agent_auth-0.10.4-4.18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-8.8p1-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-keycat" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-keycat-8.8p1-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-clients" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-clients-8.8p1-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-askpass" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-askpass-8.8p1-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-debuginfo" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-debuginfo-8.8p1-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-server" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-server-8.8p1-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-debugsource" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-debugsource-8.8p1-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="openssh-help" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-help-8.8p1-18.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-askpass" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-askpass-8.8p1-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-debuginfo" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-debuginfo-8.8p1-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-clients" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-clients-8.8p1-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-server" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-server-8.8p1-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pam_ssh_agent_auth" release="4.18.oe2203sp1" version="0.10.4">
                         <filename>pam_ssh_agent_auth-0.10.4-4.18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-keycat" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-keycat-8.8p1-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-debugsource" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-debugsource-8.8p1-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh" release="18.oe2203sp1" version="8.8p1">
                         <filename>openssh-8.8p1-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1065</id>
          <title>An update for ImageMagick is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-44267" id="CVE-2022-44267" title="CVE-2022-44267" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-44268" id="CVE-2022-44268" title="CVE-2022-44268" type="cve"></reference>
          </references>
          <description>ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin input.(CVE-2022-44267)ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).(CVE-2022-44268)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-c++-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debugsource" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-debugsource-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-perl" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-perl-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debuginfo" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-debuginfo-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-devel" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-devel-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-help" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-help-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++-devel" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-c++-devel-7.1.0.28-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++-devel" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-c++-devel-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-c++-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-perl" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-perl-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debugsource" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-debugsource-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debuginfo" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-debuginfo-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-devel" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-devel-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-help" release="6.oe2203sp1" version="7.1.0.28">
                         <filename>ImageMagick-help-7.1.0.28-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1066</id>
          <title>An update for vim is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0433" id="CVE-2023-0433" title="CVE-2023-0433" type="cve"></reference>
          </references>
          <description>Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.(CVE-2023-0433)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="vim-enhanced" release="9.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-X11" release="9.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debugsource" release="9.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-minimal" release="9.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debuginfo" release="9.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-common" release="9.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="noarch" name="vim-filesystem" release="9.oe2203sp1" version="9.0">
                         <filename>vim-filesystem-9.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-common" release="9.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debugsource" release="9.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debuginfo" release="9.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-enhanced" release="9.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-X11" release="9.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-minimal" release="9.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1068</id>
          <title>An update for bind is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3094" id="CVE-2022-3094" title="CVE-2022-3094" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3736" id="CVE-2022-3736" title="CVE-2022-3736" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3924" id="CVE-2022-3924" title="CVE-2022-3924" type="cve"></reference>
          </references>
          <description>Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the checking of access permissions (ACLs) and is retained during the processing of a dynamic update from a client whose access credentials are accepted. Memory allocated to clients that are not permitted to send updates is released immediately upon rejection. The scope of this vulnerability is limited therefore to trusted clients who are permitted to make dynamic zone changes. If a dynamic update is REFUSED, memory will be released again very quickly. Therefore it is only likely to be possible to degrade or stop `named` by sending a flood of unaccepted dynamic updates comparable in magnitude to a query flood intended to achieve the same detrimental outcome. BIND 9.11 and earlier branches are also affected, but through exhaustion of internal resources rather than memory constraints. This may reduce performance but should not be a significant problem for most servers. Therefore we don&#39;t intend to address this for BIND versions prior to BIND 9.16. This issue affects BIND 9 versions 9.16.0 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.8-S1 through 9.16.36-S1.(CVE-2022-3094)BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.(CVE-2022-3736)This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value greater than zero. If the resolver receives many queries that require recursion, there will be a corresponding increase in the number of clients that are waiting for recursion to complete. If there are sufficient clients already waiting when a new client query is received so that it is necessary to SERVFAIL the longest waiting client (see BIND 9 ARM `recursive-clients` limit and soft quota), then it is possible for a race to occur between providing a stale answer to this older client and sending an early timeout SERVFAIL, which may cause an assertion failure. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.(CVE-2022-3924)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="3" arch="aarch64" name="bind-pkcs11-utils" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-pkcs11-utils-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-dnssec-utils" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-dnssec-utils-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-chroot" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-chroot-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-pkcs11-devel" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-pkcs11-devel-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-pkcs11-libs" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-pkcs11-libs-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-debugsource" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-debugsource-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-devel" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-devel-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-debuginfo" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-debuginfo-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-libs" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-libs-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-utils" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-utils-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="aarch64" name="bind-pkcs11" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-pkcs11-9.16.23-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="3" arch="noarch" name="bind-license" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-license-9.16.23-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="3" arch="noarch" name="python3-bind" release="15.oe2203sp1" version="9.16.23">
                         <filename>python3-bind-9.16.23-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="3" arch="noarch" name="bind-dnssec-doc" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-dnssec-doc-9.16.23-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-dnssec-utils" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-dnssec-utils-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-chroot" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-chroot-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-pkcs11" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-pkcs11-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-debuginfo" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-debuginfo-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-debugsource" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-debugsource-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-pkcs11-utils" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-pkcs11-utils-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-libs" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-libs-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-devel" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-devel-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-pkcs11-devel" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-pkcs11-devel-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-pkcs11-libs" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-pkcs11-libs-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="3" arch="x86_64" name="bind-utils" release="15.oe2203sp1" version="9.16.23">
                         <filename>bind-utils-9.16.23-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1070</id>
          <title>An update for tmux is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-47016" id="CVE-2022-47016" title="CVE-2022-47016" type="cve"></reference>
          </references>
          <description>A null pointer dereference issue was discovered in function window_pane_set_event in window.c in tmux 3.0 thru 3.3 and later, allows attackers to cause denial of service or other unspecified impacts.(CVE-2022-47016)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="tmux-debuginfo" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-debuginfo-3.2a-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tmux-debugsource" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-debugsource-3.2a-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tmux" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-3.2a-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tmux-debuginfo" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-debuginfo-3.2a-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tmux-debugsource" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-debugsource-3.2a-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tmux" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-3.2a-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="tmux-help" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-help-3.2a-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="tmux-help" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-help-3.2a-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tmux-debuginfo" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-debuginfo-3.2a-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tmux-debugsource" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-debugsource-3.2a-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tmux" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-3.2a-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tmux-debuginfo" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-debuginfo-3.2a-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tmux-debugsource" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-debugsource-3.2a-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tmux" release="3.oe2203sp1" version="3.2a">
                         <filename>tmux-3.2a-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1072</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0179" id="CVE-2023-0179" title="CVE-2023-0179" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23455" id="CVE-2023-23455" title="CVE-2023-23455" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23454" id="CVE-2023-23454" title="CVE-2023-23454" type="cve"></reference>
          </references>
          <description>A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.(CVE-2023-0179)atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).(CVE-2023-23455)cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).(CVE-2023-23454)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.17.0.93.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.17.0.93.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.17.0.93.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1077</id>
          <title>An update for lxc is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Low</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-47952" id="CVE-2022-47952" title="CVE-2022-47952" type="cve"></reference>
          </references>
          <description>lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because &#34;Failed to open&#34; often indicates that a file does not exist, whereas &#34;does not refer to a network namespace path&#34; often indicates that a file exists. NOTE: this is different from CVE-2018-6556 because the CVE-2018-6556 fix design was based on the premise that &#34;we will report back to the user that the open() failed but the user has no way of knowing why it failed&#34;; however, in many realistic cases, there are no plausible reasons for failing except that the file does not exist.(CVE-2022-47952)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="lxc-devel" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-devel-4.0.3-2022102408.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="lxc-libs" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-libs-4.0.3-2022102408.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="lxc-debugsource" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-debugsource-4.0.3-2022102408.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="lxc-debuginfo" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-debuginfo-4.0.3-2022102408.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="lxc" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-4.0.3-2022102408.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="lxc-help" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-help-4.0.3-2022102408.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="lxc-debuginfo" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-debuginfo-4.0.3-2022102408.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="lxc-debugsource" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-debugsource-4.0.3-2022102408.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="lxc-libs" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-libs-4.0.3-2022102408.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="lxc" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-4.0.3-2022102408.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="lxc-devel" release="2022102408.oe2203sp1" version="4.0.3">
                         <filename>lxc-devel-4.0.3-2022102408.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1078</id>
          <title>An update for libXpm is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4883" id="CVE-2022-4883" title="CVE-2022-4883" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-44617" id="CVE-2022-44617" title="CVE-2022-44617" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-46285" id="CVE-2022-46285" title="CVE-2022-46285" type="cve"></reference>
          </references>
          <description>A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.(CVE-2022-4883)A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.(CVE-2022-44617)A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.(CVE-2022-46285)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libXpm" release="4.oe2203sp1" version="3.5.13">
                         <filename>libXpm-3.5.13-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libXpm-devel" release="4.oe2203sp1" version="3.5.13">
                         <filename>libXpm-devel-3.5.13-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libXpm-debugsource" release="4.oe2203sp1" version="3.5.13">
                         <filename>libXpm-debugsource-3.5.13-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libXpm-debuginfo" release="4.oe2203sp1" version="3.5.13">
                         <filename>libXpm-debuginfo-3.5.13-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libXpm-help" release="4.oe2203sp1" version="3.5.13">
                         <filename>libXpm-help-3.5.13-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libXpm-debuginfo" release="4.oe2203sp1" version="3.5.13">
                         <filename>libXpm-debuginfo-3.5.13-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libXpm-devel" release="4.oe2203sp1" version="3.5.13">
                         <filename>libXpm-devel-3.5.13-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libXpm" release="4.oe2203sp1" version="3.5.13">
                         <filename>libXpm-3.5.13-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libXpm-debugsource" release="4.oe2203sp1" version="3.5.13">
                         <filename>libXpm-debugsource-3.5.13-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1079</id>
          <title>An update for tpm2-tss is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-22745" id="CVE-2023-22745" title="CVE-2023-22745" type="cve"></reference>
          </references>
          <description>tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In affected versions `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `layer_handler` with an 8 bit layer number, but the array only has `TPM2_ERROR_TSS2_RC_LAYER_COUNT` entries, so trying to add a handler for higher-numbered layers or decode a response code with such a layer number reads/writes past the end of the buffer. This Buffer overrun, could result in arbitrary code execution. An example attack would be a MiTM bus attack that returns 0xFFFFFFFF for the RC. Given the common use case of TPM modules an attacker must have local access to the target machine with local system privileges which allows access to the TPM system. Usually TPM access requires administrative privilege.(CVE-2023-22745)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="tpm2-tss-devel" release="3.oe2203sp1" version="3.1.0">
                         <filename>tpm2-tss-devel-3.1.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tpm2-tss-debuginfo" release="3.oe2203sp1" version="3.1.0">
                         <filename>tpm2-tss-debuginfo-3.1.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tpm2-tss-debugsource" release="3.oe2203sp1" version="3.1.0">
                         <filename>tpm2-tss-debugsource-3.1.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tpm2-tss" release="3.oe2203sp1" version="3.1.0">
                         <filename>tpm2-tss-3.1.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="tpm2-tss-help" release="3.oe2203sp1" version="3.1.0">
                         <filename>tpm2-tss-help-3.1.0-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tpm2-tss-debuginfo" release="3.oe2203sp1" version="3.1.0">
                         <filename>tpm2-tss-debuginfo-3.1.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tpm2-tss-debugsource" release="3.oe2203sp1" version="3.1.0">
                         <filename>tpm2-tss-debugsource-3.1.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tpm2-tss-devel" release="3.oe2203sp1" version="3.1.0">
                         <filename>tpm2-tss-devel-3.1.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tpm2-tss" release="3.oe2203sp1" version="3.1.0">
                         <filename>tpm2-tss-3.1.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1080</id>
          <title>An update for golang is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41717" id="CVE-2022-41717" title="CVE-2022-41717" type="cve"></reference>
          </references>
          <description>An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.(CVE-2022-41717)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="golang" release="14.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-help" release="14.oe2203sp1" version="1.17.3">
                         <filename>golang-help-1.17.3-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-devel" release="14.oe2203sp1" version="1.17.3">
                         <filename>golang-devel-1.17.3-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="golang" release="14.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1106</id>
          <title>An update for tar is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48303" id="CVE-2022-48303" title="CVE-2022-48303" type="cve"></reference>
          </references>
          <description>GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.(CVE-2022-48303)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="tar-debuginfo" release="4.oe2203sp1" version="1.34">
                         <filename>tar-debuginfo-1.34-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="tar" release="4.oe2203sp1" version="1.34">
                         <filename>tar-1.34-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="tar-debugsource" release="4.oe2203sp1" version="1.34">
                         <filename>tar-debugsource-1.34-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="noarch" name="tar-help" release="4.oe2203sp1" version="1.34">
                         <filename>tar-help-1.34-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="tar-debugsource" release="4.oe2203sp1" version="1.34">
                         <filename>tar-debugsource-1.34-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="tar-debuginfo" release="4.oe2203sp1" version="1.34">
                         <filename>tar-debuginfo-1.34-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="tar" release="4.oe2203sp1" version="1.34">
                         <filename>tar-1.34-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1107</id>
          <title>An update for openssl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0215" id="CVE-2023-0215" title="CVE-2023-0215" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4304" id="CVE-2022-4304" title="CVE-2022-4304" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4450" id="CVE-2022-4450" title="CVE-2022-4450" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0286" id="CVE-2023-0286" title="CVE-2023-0286" type="cve"></reference>
          </references>
          <description>The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. This scenario occurs directly in the internal function B64_write_ASN1() which may cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on the BIO. This internal function is in turn called by the public API functions PEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream, SMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7. Other public API functions that may be impacted by this include i2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and i2d_PKCS7_bio_stream. The OpenSSL cms and smime command line applications are similarly affected.(CVE-2023-0215)A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.(CVE-2022-4304)The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the &#34;name&#34; (e.g. &#34;CERTIFICATE&#34;), any header data and the payload data. If the function succeeds then the &#34;name_out&#34;, &#34;header&#34; and &#34;data&#34; arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. This could be exploited by an attacker who has the ability to supply malicious PEM files for parsing to achieve a denial of service attack. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. These locations include the PEM_read_bio_TYPE() functions as well as the decoders introduced in OpenSSL 3.0. The OpenSSL asn1parse command line application is also impacted by this issue.(CVE-2022-4450)There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.(CVE-2023-0286)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="openssl-debugsource" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-devel" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-libs" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-debuginfo" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-perl" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="openssl-help" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-help-1.1.1m-16.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-devel" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-perl" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debugsource" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debuginfo" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-libs" release="16.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1108</id>
          <title>An update for apr-util is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-02-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-25147" id="CVE-2022-25147" title="CVE-2022-25147" type="cve"></reference>
          </references>
          <description>Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.(CVE-2022-25147)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="apr-util-devel" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-devel-1.6.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="apr-util-debugsource" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-debugsource-1.6.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="apr-util-pgsql" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-pgsql-1.6.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="apr-util" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-1.6.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="apr-util-odbc" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-odbc-1.6.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="apr-util-debuginfo" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-debuginfo-1.6.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr-util-debuginfo" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-debuginfo-1.6.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr-util-devel" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-devel-1.6.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr-util-odbc" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-odbc-1.6.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr-util-pgsql" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-pgsql-1.6.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr-util" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-1.6.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr-util-debugsource" release="14.oe2203sp1" version="1.6.1">
                         <filename>apr-util-debugsource-1.6.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1109</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3707" id="CVE-2022-3707" title="CVE-2022-3707" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0394" id="CVE-2023-0394" title="CVE-2023-0394" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0590" id="CVE-2023-0590" title="CVE-2023-0590" type="cve"></reference>
          </references>
          <description>A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system.(CVE-2022-3707)A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.(CVE-2023-0394)A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem leading to a denial-of-service problem. Reference:https://lore.kernel.org/all/20221018203258.2793282-1-edumazet@google.com/Crash:    BUG: KASAN: use-after-free in __tcf_qdisc_find.part.0+0xa3a/0xac0 net/sched/cls_api.c:1066    Read of size 4 at addr ffff88802065e038 by task syz-executor.4/21027        CPU: 0 PID: 21027 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00363-g7726d4c3e60b #0    Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022    Call Trace:    &lt;TASK&gt;    __dump_stack lib/dump_stack.c:88 [inline]    dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106    print_address_description mm/kasan/report.c:317 [inline]    print_report.cold+0x2ba/0x719 mm/kasan/report.c:433    kasan_report+0xb1/0x1e0 mm/kasan/report.c:495    __tcf_qdisc_find.part.0+0xa3a/0xac0 net/sched/cls_api.c:1066    __tcf_qdisc_find net/sched/cls_api.c:1051 [inline]    tc_new_tfilter+0x34f/0x2200 net/sched/cls_api.c:2018    rtnetlink_rcv_msg+0x955/0xca0 net/core/rtnetlink.c:6081    netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2501    netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]    netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345    netlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921    sock_sendmsg_nosec net/socket.c:714 [inline]    sock_sendmsg+0xcf/0x120 net/socket.c:734    ____sys_sendmsg+0x6eb/0x810 net/socket.c:2482    ___sys_sendmsg+0x110/0x1b0 net/socket.c:2536    __sys_sendmsg+0xf3/0x1c0 net/socket.c:2565    do_syscall_x64 arch/x86/entry/common.c:50 [inline]    do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80    entry_SYSCALL_64_after_hwframe+0x63/0xcd    RIP: 0033:0x7f5efaa89279(CVE-2023-0590)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-headers" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.19.0.95.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.19.0.95.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.19.0.95.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1110</id>
          <title>An update for c-ares is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4904" id="CVE-2022-4904" title="CVE-2022-4904" type="cve"></reference>
          </references>
          <description>In ares_set_sortlist, it calls config_sortlist(..., sortstr) to parse the input str and initialize a sortlist configuration. However, ares_set_sortlist has not any checks about the validity of the input str. It is very easy to create an arbitrary length stack overflow with the unchecked memcpy(ipbuf, str, q-str); and memcpy(ipbufpfx, str, q-str); statements in the config_sortlist call, which could potentially cause severe security impact in practical programs.(CVE-2022-4904)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="c-ares-debuginfo" release="4.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debuginfo-1.18.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares" release="4.oe2203sp1" version="1.18.1">
                         <filename>c-ares-1.18.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares-devel" release="4.oe2203sp1" version="1.18.1">
                         <filename>c-ares-devel-1.18.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares-debugsource" release="4.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debugsource-1.18.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="c-ares-help" release="4.oe2203sp1" version="1.18.1">
                         <filename>c-ares-help-1.18.1-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares" release="4.oe2203sp1" version="1.18.1">
                         <filename>c-ares-1.18.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-debuginfo" release="4.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debuginfo-1.18.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-debugsource" release="4.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debugsource-1.18.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-devel" release="4.oe2203sp1" version="1.18.1">
                         <filename>c-ares-devel-1.18.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1111</id>
          <title>An update for harfbuzz is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25193" id="CVE-2023-25193" title="CVE-2023-25193" type="cve"></reference>
          </references>
          <description>hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.(CVE-2023-25193)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="harfbuzz-debuginfo" release="4.oe2203sp1" version="2.8.2">
                         <filename>harfbuzz-debuginfo-2.8.2-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="harfbuzz" release="4.oe2203sp1" version="2.8.2">
                         <filename>harfbuzz-2.8.2-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="harfbuzz-debugsource" release="4.oe2203sp1" version="2.8.2">
                         <filename>harfbuzz-debugsource-2.8.2-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="harfbuzz-devel" release="4.oe2203sp1" version="2.8.2">
                         <filename>harfbuzz-devel-2.8.2-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="harfbuzz-help" release="4.oe2203sp1" version="2.8.2">
                         <filename>harfbuzz-help-2.8.2-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="harfbuzz-debuginfo" release="4.oe2203sp1" version="2.8.2">
                         <filename>harfbuzz-debuginfo-2.8.2-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="harfbuzz" release="4.oe2203sp1" version="2.8.2">
                         <filename>harfbuzz-2.8.2-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="harfbuzz-debugsource" release="4.oe2203sp1" version="2.8.2">
                         <filename>harfbuzz-debugsource-2.8.2-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="harfbuzz-devel" release="4.oe2203sp1" version="2.8.2">
                         <filename>harfbuzz-devel-2.8.2-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1112</id>
          <title>An update for rubygem-globalid is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-22799" id="CVE-2023-22799" title="CVE-2023-22799" type="cve"></reference>
          </references>
          <description>A ReDoS based DoS vulnerability in the GlobalID &lt;1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.(CVE-2023-22799)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="rubygem-globalid" release="4.oe2203sp1" version="0.4.2">
                         <filename>rubygem-globalid-0.4.2-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-globalid-doc" release="4.oe2203sp1" version="0.4.2">
                         <filename>rubygem-globalid-doc-0.4.2-4.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1113</id>
          <title>An update for python-cryptography is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23931" id="CVE-2023-23931" title="CVE-2023-23931" type="cve"></reference>
          </references>
          <description>cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.(CVE-2023-23931)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python-cryptography-debuginfo" release="2.oe2203sp1" version="36.0.1">
                         <filename>python-cryptography-debuginfo-36.0.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python-cryptography-debugsource" release="2.oe2203sp1" version="36.0.1">
                         <filename>python-cryptography-debugsource-36.0.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-cryptography" release="2.oe2203sp1" version="36.0.1">
                         <filename>python3-cryptography-36.0.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="python-cryptography-help" release="2.oe2203sp1" version="36.0.1">
                         <filename>python-cryptography-help-36.0.1-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-cryptography" release="2.oe2203sp1" version="36.0.1">
                         <filename>python3-cryptography-36.0.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-cryptography-debugsource" release="2.oe2203sp1" version="36.0.1">
                         <filename>python-cryptography-debugsource-36.0.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-cryptography-debuginfo" release="2.oe2203sp1" version="36.0.1">
                         <filename>python-cryptography-debuginfo-36.0.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1114</id>
          <title>An update for python-django is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23969" id="CVE-2023-23969" title="CVE-2023-23969" type="cve"></reference>
          </references>
          <description>In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.(CVE-2023-23969)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python-django-help" release="1.oe2203sp1" version="3.2.12">
                         <filename>python-django-help-3.2.12-1.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-Django" release="1.oe2203sp1" version="3.2.12">
                         <filename>python3-Django-3.2.12-1.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-Django" release="2.oe2203sp1" version="3.2.12">
                         <filename>python3-Django-3.2.12-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python-django-help" release="2.oe2203sp1" version="3.2.12">
                         <filename>python-django-help-3.2.12-2.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1115</id>
          <title>An update for wireshark is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3724" id="CVE-2022-3724" title="CVE-2022-3724" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4344" id="CVE-2022-4344" title="CVE-2022-4344" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4345" id="CVE-2022-4345" title="CVE-2022-4345" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0413" id="CVE-2023-0413" title="CVE-2023-0413" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0417" id="CVE-2023-0417" title="CVE-2023-0417" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0415" id="CVE-2023-0415" title="CVE-2023-0415" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0411" id="CVE-2023-0411" title="CVE-2023-0411" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0412" id="CVE-2023-0412" title="CVE-2023-0412" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0416" id="CVE-2023-0416" title="CVE-2023-0416" type="cve"></reference>
          </references>
          <description>Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows(CVE-2022-3724)Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file(CVE-2022-4344)Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file(CVE-2022-4345)Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file(CVE-2023-0413)Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file(CVE-2023-0417)iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file(CVE-2023-0415)Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file(CVE-2023-0411)TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file(CVE-2023-0412)GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file(CVE-2023-0416)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="wireshark-debuginfo" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-devel" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-help" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debugsource" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debuginfo" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-devel" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-help" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debugsource" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debuginfo" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-devel" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debugsource" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-help" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debuginfo" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-devel" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debugsource" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-help" release="1.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1116</id>
          <title>An update for gssntlmssp is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25564" id="CVE-2023-25564" title="CVE-2023-25564" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25565" id="CVE-2023-25565" title="CVE-2023-25565" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25567" id="CVE-2023-25567" title="CVE-2023-25567" type="cve"></reference>
          </references>
          <description>GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable `outlen` was not initialized and could cause writing a zero to an arbitrary place in memory if `ntlm_str_convert()` were to fail, which would leave `outlen` uninitialized. This can lead to a denial of service if the write hits unmapped memory or randomly corrupts a byte in the application memory space. This vulnerability can trigger an out-of-bounds write, leading to memory corruption. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point. This issue is fixed in version 1.2.0.(CVE-2023-25564)GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the `cb` and `sh` buffers contain a copy of the data that needs to be freed. However, that is not the case. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point. This will likely trigger an assertion failure in `free`, causing a denial-of-service. This issue is fixed in version 1.2.0.(CVE-2023-25565)GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of the elements which can trigger an out-of-bound read. The out-of-bounds read can be triggered via the main `gss_accept_sec_context` entry point and could cause a denial-of-service if the memory is unmapped. The issue is fixed in version 1.2.0.(CVE-2023-25567)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="gssntlmssp-debuginfo" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-debuginfo-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gssntlmssp-help" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-help-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gssntlmssp-debugsource" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-debugsource-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gssntlmssp" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gssntlmssp-devel" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-devel-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gssntlmssp-debuginfo" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-debuginfo-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gssntlmssp-help" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-help-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gssntlmssp-debugsource" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-debugsource-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gssntlmssp" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gssntlmssp-devel" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-devel-0.7.0-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp-help" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-help-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp-debuginfo" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-debuginfo-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp-debugsource" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-debugsource-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp-devel" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-devel-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp-help" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-help-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp-debuginfo" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-debuginfo-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp-debugsource" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-debugsource-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gssntlmssp-devel" release="10.oe2203sp1" version="0.7.0">
                         <filename>gssntlmssp-devel-0.7.0-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1117</id>
          <title>An update for apr is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-24963" id="CVE-2022-24963" title="CVE-2022-24963" type="cve"></reference>
          </references>
          <description>Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.(CVE-2022-24963)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="apr-debuginfo" release="6.oe2203sp1" version="1.7.0">
                         <filename>apr-debuginfo-1.7.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="apr-devel" release="6.oe2203sp1" version="1.7.0">
                         <filename>apr-devel-1.7.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="apr-debugsource" release="6.oe2203sp1" version="1.7.0">
                         <filename>apr-debugsource-1.7.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="apr" release="6.oe2203sp1" version="1.7.0">
                         <filename>apr-1.7.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="apr-help" release="6.oe2203sp1" version="1.7.0">
                         <filename>apr-help-1.7.0-6.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr-debuginfo" release="6.oe2203sp1" version="1.7.0">
                         <filename>apr-debuginfo-1.7.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr-debugsource" release="6.oe2203sp1" version="1.7.0">
                         <filename>apr-debugsource-1.7.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr-devel" release="6.oe2203sp1" version="1.7.0">
                         <filename>apr-devel-1.7.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="apr" release="6.oe2203sp1" version="1.7.0">
                         <filename>apr-1.7.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1120</id>
          <title>An update for git is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-22490" id="CVE-2023-22490" title="CVE-2023-22490" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23946" id="CVE-2023-23946" title="CVE-2023-23946" type="cve"></reference>
          </references>
          <description>Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort local clones whose source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a symbolic link. These two may be combined to include arbitrary files based on known paths on the victim&#39;s filesystem within the malicious repository&#39;s working copy, allowing for data exfiltration in a similar manner as CVE-2022-39253. A fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5 v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`. Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it does not contain suspicious module URLs.(CVE-2023-22490)Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6, v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid applying one that creates a symbolic link and then creates a file beyond the symbolic link.(CVE-2023-23946)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="git-debuginfo" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-debuginfo-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-daemon" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-daemon-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-core" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-core-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-debugsource" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-debugsource-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-2.33.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-help" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-help-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="gitk" release="9.oe2203sp1" version="2.33.0">
                         <filename>gitk-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-gui" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-gui-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="perl-Git" release="9.oe2203sp1" version="2.33.0">
                         <filename>perl-Git-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-email" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-email-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-svn" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-svn-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-web" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-web-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="perl-Git-SVN" release="9.oe2203sp1" version="2.33.0">
                         <filename>perl-Git-SVN-2.33.0-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-daemon" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-daemon-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-core" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-core-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-debuginfo" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-debuginfo-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-debugsource" release="9.oe2203sp1" version="2.33.0">
                         <filename>git-debugsource-2.33.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1121</id>
          <title>An update for shim is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0286" id="CVE-2023-0286" title="CVE-2023-0286" type="cve"></reference>
          </references>
          <description>There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.(CVE-2023-0286)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="shim" release="9.oe2203sp1" version="15.6">
                         <filename>shim-15.6-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="shim-debugsource" release="9.oe2203sp1" version="15.6">
                         <filename>shim-debugsource-15.6-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="shim-debuginfo" release="9.oe2203sp1" version="15.6">
                         <filename>shim-debuginfo-15.6-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="shim" release="9.oe2203sp1" version="15.6">
                         <filename>shim-15.6-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1125</id>
          <title>An update for curl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23915" id="CVE-2023-23915" title="CVE-2023-23915" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23914" id="CVE-2023-23914" title="CVE-2023-23914" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23916" id="CVE-2023-23916" title="CVE-2023-23916" type="cve"></reference>
          </references>
          <description>A flaw was found in the Curl package, where the HSTS mechanism could fail when multiple transfers are done in parallel, as the HSTS cache file gets overwritten by the most recently completed transfer. This issue may result in limited confidentiality and integrity.(CVE-2023-23915)A flaw was found in the Curl package, where the HSTS mechanism would be ignored by subsequent transfers when done on the same command line because the state would not be properly carried. This issue may result in limited confidentiality and integrity.(CVE-2023-23914)curl supports &#34;chained&#34; HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with different algorithms. The number of acceptable &#34;links&#34; in this &#34;decompression chain&#34; was capped, but the cap was implemented on a per-header basis allowing a malicious server to insert a virtually unlimited number of compression steps simply by using many headers. The use of such a decompression chain could result in a &#34;malloc bomb&#34;, making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.(CVE-2023-23916)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="curl" release="14.oe2203sp1" version="7.79.1">
                         <filename>curl-7.79.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libcurl" release="14.oe2203sp1" version="7.79.1">
                         <filename>libcurl-7.79.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl-debuginfo" release="14.oe2203sp1" version="7.79.1">
                         <filename>curl-debuginfo-7.79.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl-debugsource" release="14.oe2203sp1" version="7.79.1">
                         <filename>curl-debugsource-7.79.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libcurl-devel" release="14.oe2203sp1" version="7.79.1">
                         <filename>libcurl-devel-7.79.1-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="curl-help" release="14.oe2203sp1" version="7.79.1">
                         <filename>curl-help-7.79.1-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl" release="14.oe2203sp1" version="7.79.1">
                         <filename>curl-7.79.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcurl" release="14.oe2203sp1" version="7.79.1">
                         <filename>libcurl-7.79.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl-debugsource" release="14.oe2203sp1" version="7.79.1">
                         <filename>curl-debugsource-7.79.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcurl-devel" release="14.oe2203sp1" version="7.79.1">
                         <filename>libcurl-devel-7.79.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl-debuginfo" release="14.oe2203sp1" version="7.79.1">
                         <filename>curl-debuginfo-7.79.1-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1126</id>
          <title>An update for gnutls is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0361" id="CVE-2023-0361" title="CVE-2023-0361" type="cve"></reference>
          </references>
          <description>A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.(CVE-2023-0361)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="gnutls" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-3.7.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gnutls-utils" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-utils-3.7.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gnutls-debugsource" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-debugsource-3.7.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gnutls-devel" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-devel-3.7.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gnutls-debuginfo" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-debuginfo-3.7.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="gnutls-help" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-help-3.7.2-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gnutls-utils" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-utils-3.7.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gnutls-debuginfo" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-debuginfo-3.7.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gnutls-debugsource" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-debugsource-3.7.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gnutls" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-3.7.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gnutls-devel" release="7.oe2203sp1" version="3.7.2">
                         <filename>gnutls-devel-3.7.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1127</id>
          <title>An update for xorg-x11-server is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0494" id="CVE-2023-0494" title="CVE-2023-0494" type="cve"></reference>
          </references>
          <description>A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.(CVE-2023-0494)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="xorg-x11-server-debuginfo" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-debuginfo-1.20.11-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-common" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-common-1.20.11-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-1.20.11-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-Xnest" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xnest-1.20.11-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-Xvfb" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xvfb-1.20.11-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-Xdmx" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xdmx-1.20.11-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-devel" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-devel-1.20.11-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-Xephyr" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xephyr-1.20.11-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-debugsource" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-debugsource-1.20.11-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="xorg-x11-server-help" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-help-1.20.11-16.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="xorg-x11-server-source" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-source-1.20.11-16.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-Xvfb" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xvfb-1.20.11-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-common" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-common-1.20.11-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-debuginfo" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-debuginfo-1.20.11-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-debugsource" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-debugsource-1.20.11-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-Xdmx" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xdmx-1.20.11-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-Xnest" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xnest-1.20.11-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-1.20.11-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-devel" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-devel-1.20.11-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-Xephyr" release="16.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xephyr-1.20.11-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1128</id>
          <title>An update for libtiff is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0801" id="CVE-2023-0801" title="CVE-2023-0801" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0797" id="CVE-2023-0797" title="CVE-2023-0797" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0796" id="CVE-2023-0796" title="CVE-2023-0796" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0799" id="CVE-2023-0799" title="CVE-2023-0799" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0804" id="CVE-2023-0804" title="CVE-2023-0804" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0802" id="CVE-2023-0802" title="CVE-2023-0802" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0795" id="CVE-2023-0795" title="CVE-2023-0795" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0803" id="CVE-2023-0803" title="CVE-2023-0803" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0800" id="CVE-2023-0800" title="CVE-2023-0800" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0798" id="CVE-2023-0798" title="CVE-2023-0798" type="cve"></reference>
          </references>
          <description>LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0801)LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0797)LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0796)LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0799)LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0804)LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0802)LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0795)LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0803)LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0800)LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0798)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libtiff-tools" release="23.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff" release="23.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debuginfo" release="23.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debugsource" release="23.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-devel" release="23.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-static" release="23.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libtiff-help" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-help-4.3.0-24.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="libtiff-help" release="23.oe2203sp1" version="4.3.0">
                         <filename>libtiff-help-4.3.0-23.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debuginfo" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debugsource" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-static" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-devel" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-tools" release="24.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1129</id>
          <title>An update for less is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-02-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-46663" id="CVE-2022-46663" title="CVE-2022-46663" type="cve"></reference>
          </references>
          <description>In GNU Less before 609, crafted data can result in &#34;less -R&#34; not filtering ANSI escape sequences sent to the terminal.(CVE-2022-46663)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="less" release="4.oe2203sp1" version="590">
                         <filename>less-590-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="less-debuginfo" release="4.oe2203sp1" version="590">
                         <filename>less-debuginfo-590-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="less-debugsource" release="4.oe2203sp1" version="590">
                         <filename>less-debugsource-590-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="less-help" release="4.oe2203sp1" version="590">
                         <filename>less-help-590-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="less-debuginfo" release="4.oe2203sp1" version="590">
                         <filename>less-debuginfo-590-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="less" release="4.oe2203sp1" version="590">
                         <filename>less-590-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="less-debugsource" release="4.oe2203sp1" version="590">
                         <filename>less-debugsource-590-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1131</id>
          <title>An update for glibc is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-03-01"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0687" id="CVE-2023-0687" title="CVE-2023-0687" type="cve"></reference>
          </references>
          <description>** DISPUTED ** A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It&#39;s basically trusted input or input that needs an actual security flaw to be compromised or controlled.(CVE-2023-0687)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="nss_modules" release="112.oe2203sp1" version="2.34">
                         <filename>nss_modules-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-nss-devel" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-nss-devel-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-devel" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-devel-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-locale-archive" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-locale-archive-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-debuginfo" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-debuginfo-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-all-langpacks" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-all-langpacks-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libnsl" release="112.oe2203sp1" version="2.34">
                         <filename>libnsl-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-common" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-common-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-compat-2.17" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-compat-2.17-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-debugutils" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-debugutils-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-debugsource" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-debugsource-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glibc-locale-source" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-locale-source-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="nscd" release="112.oe2203sp1" version="2.34">
                         <filename>nscd-2.34-112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="glibc-help" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-help-2.34-112.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="nscd" release="112.oe2203sp1" version="2.34">
                         <filename>nscd-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-debuginfo" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-debuginfo-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-nss-devel" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-nss-devel-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-locale-archive" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-locale-archive-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-devel" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-devel-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libnsl" release="112.oe2203sp1" version="2.34">
                         <filename>libnsl-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-debugsource" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-debugsource-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-common" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-common-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-locale-source" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-locale-source-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-debugutils" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-debugutils-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="nss_modules" release="112.oe2203sp1" version="2.34">
                         <filename>nss_modules-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-compat-2.17" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-compat-2.17-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glibc-all-langpacks" release="112.oe2203sp1" version="2.34">
                         <filename>glibc-all-langpacks-2.34-112.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1133</id>
          <title>An update for rubygem-activerecord is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-01"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-44566" id="CVE-2022-44566" title="CVE-2022-44566" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-22794" id="CVE-2023-22794" title="CVE-2023-22794" type="cve"></reference>
          </references>
          <description>A denial of service vulnerability present in ActiveRecord&#39;s PostgreSQL adapter &lt;7.0.4.1 and &lt;6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.(CVE-2022-44566)A vulnerability in ActiveRecord &lt;6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the `annotate` query method, the `optimizer_hints` query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.(CVE-2023-22794)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="noarch" name="rubygem-activerecord-doc" release="2.oe2203sp1" version="6.1.4.1">
                         <filename>rubygem-activerecord-doc-6.1.4.1-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="rubygem-activerecord" release="2.oe2203sp1" version="6.1.4.1">
                         <filename>rubygem-activerecord-6.1.4.1-2.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1134</id>
          <title>An update for leptonica is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-03-04"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-38266" id="CVE-2022-38266" title="CVE-2022-38266" type="cve"></reference>
          </references>
          <description>An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.(CVE-2022-38266)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="leptonica-tools" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-tools-1.79.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="leptonica-devel" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-devel-1.79.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="leptonica-debuginfo" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-debuginfo-1.79.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="leptonica" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-1.79.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="leptonica-debugsource" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-debugsource-1.79.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="leptonica-debugsource" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-debugsource-1.79.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="leptonica" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-1.79.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="leptonica-debuginfo" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-debuginfo-1.79.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="leptonica-tools" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-tools-1.79.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="leptonica-devel" release="3.oe2203sp1" version="1.79.0">
                         <filename>leptonica-devel-1.79.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1135</id>
          <title>An update for edk2 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-04"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0215" id="CVE-2023-0215" title="CVE-2023-0215" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0286" id="CVE-2023-0286" title="CVE-2023-0286" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0401" id="CVE-2023-0401" title="CVE-2023-0401" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4450" id="CVE-2022-4450" title="CVE-2022-4450" type="cve"></reference>
          </references>
          <description>The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. This scenario occurs directly in the internal function B64_write_ASN1() which may cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on the BIO. This internal function is in turn called by the public API functions PEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream, SMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7. Other public API functions that may be impacted by this include i2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and i2d_PKCS7_bio_stream. The OpenSSL cms and smime command line applications are similarly affected.(CVE-2023-0215)There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.(CVE-2023-0286)A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail. There is a missing check for the return value from the initialization function which later leads to invalid usage of the digest API most likely leading to a crash. The unavailability of an algorithm can be caused by using FIPS enabled configuration of providers or more commonly by not loading the legacy provider. PKCS7 data is processed by the SMIME library calls and also by the time stamp (TS) library calls. The TLS implementation in OpenSSL does not call these functions however third party applications would be affected if they call these functions to verify signatures on untrusted data.(CVE-2023-0401)The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the &#34;name&#34; (e.g. &#34;CERTIFICATE&#34;), any header data and the payload data. If the function succeeds then the &#34;name_out&#34;, &#34;header&#34; and &#34;data&#34; arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. This could be exploited by an attacker who has the ability to supply malicious PEM files for parsing to achieve a denial of service attack. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. These locations include the PEM_read_bio_TYPE() functions as well as the decoders introduced in OpenSSL 3.0. The OpenSSL asn1parse command line application is also impacted by this issue.(CVE-2022-4450)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="edk2-debuginfo" release="11.oe2203sp1" version="202011">
                         <filename>edk2-debuginfo-202011-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="edk2-debugsource" release="11.oe2203sp1" version="202011">
                         <filename>edk2-debugsource-202011-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="edk2-devel" release="11.oe2203sp1" version="202011">
                         <filename>edk2-devel-202011-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="edk2-ovmf" release="11.oe2203sp1" version="202011">
                         <filename>edk2-ovmf-202011-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="edk2-aarch64" release="11.oe2203sp1" version="202011">
                         <filename>edk2-aarch64-202011-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="edk2-help" release="11.oe2203sp1" version="202011">
                         <filename>edk2-help-202011-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-edk2-devel" release="11.oe2203sp1" version="202011">
                         <filename>python3-edk2-devel-202011-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="edk2-debugsource" release="11.oe2203sp1" version="202011">
                         <filename>edk2-debugsource-202011-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="edk2-debuginfo" release="11.oe2203sp1" version="202011">
                         <filename>edk2-debuginfo-202011-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="edk2-devel" release="11.oe2203sp1" version="202011">
                         <filename>edk2-devel-202011-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1136</id>
          <title>An update for python-django is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-04"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24580" id="CVE-2023-24580" title="CVE-2023-24580" type="cve"></reference>
          </references>
          <description>An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack.(CVE-2023-24580)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python-django-help" release="3.oe2203sp1" version="3.2.12">
                         <filename>python-django-help-3.2.12-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-Django" release="3.oe2203sp1" version="3.2.12">
                         <filename>python3-Django-3.2.12-3.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1138</id>
          <title>An update for mujs is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-04"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-44789" id="CVE-2022-44789" title="CVE-2022-44789" type="cve"></reference>
          </references>
          <description>A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.(CVE-2022-44789)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="mujs" release="3.oe2203sp1" version="1.2.0">
                         <filename>mujs-1.2.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mujs-debuginfo" release="3.oe2203sp1" version="1.2.0">
                         <filename>mujs-debuginfo-1.2.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mujs-debugsource" release="3.oe2203sp1" version="1.2.0">
                         <filename>mujs-debugsource-1.2.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mujs-devel" release="3.oe2203sp1" version="1.2.0">
                         <filename>mujs-devel-1.2.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mujs" release="3.oe2203sp1" version="1.2.0">
                         <filename>mujs-1.2.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mujs-devel" release="3.oe2203sp1" version="1.2.0">
                         <filename>mujs-devel-1.2.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mujs-debuginfo" release="3.oe2203sp1" version="1.2.0">
                         <filename>mujs-debuginfo-1.2.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mujs-debugsource" release="3.oe2203sp1" version="1.2.0">
                         <filename>mujs-debugsource-1.2.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1141</id>
          <title>An update for haproxy is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-04"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0056" id="CVE-2023-0056" title="CVE-2023-0056" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25725" id="CVE-2023-25725" title="CVE-2023-25725" type="cve"></reference>
          </references>
          <description>Initial description: Router PODs frequently getting restarted and haproxy process is receiving the segfault but it is not generating coredump even though the core file size is unlimited.Upstream bug: https://github.com/haproxy/haproxy/issues/1972(CVE-2023-0056)HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka &#34;request smuggling.&#34; The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.(CVE-2023-25725)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="haproxy-debugsource" release="2.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debugsource-2.6.6-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="haproxy" release="2.oe2203sp1" version="2.6.6">
                         <filename>haproxy-2.6.6-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="haproxy-debuginfo" release="2.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debuginfo-2.6.6-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="haproxy-help" release="2.oe2203sp1" version="2.6.6">
                         <filename>haproxy-help-2.6.6-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="haproxy-debuginfo" release="2.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debuginfo-2.6.6-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="haproxy" release="2.oe2203sp1" version="2.6.6">
                         <filename>haproxy-2.6.6-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="haproxy-debugsource" release="2.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debugsource-2.6.6-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1142</id>
          <title>An update for nodejs is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-04"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0215" id="CVE-2023-0215" title="CVE-2023-0215" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0286" id="CVE-2023-0286" title="CVE-2023-0286" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4304" id="CVE-2022-4304" title="CVE-2022-4304" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4450" id="CVE-2022-4450" title="CVE-2022-4450" type="cve"></reference>
          </references>
          <description>The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. This scenario occurs directly in the internal function B64_write_ASN1() which may cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on the BIO. This internal function is in turn called by the public API functions PEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream, SMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7. Other public API functions that may be impacted by this include i2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and i2d_PKCS7_bio_stream. The OpenSSL cms and smime command line applications are similarly affected.(CVE-2023-0215)There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.(CVE-2023-0286)A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.(CVE-2022-4304)The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the &#34;name&#34; (e.g. &#34;CERTIFICATE&#34;), any header data and the payload data. If the function succeeds then the &#34;name_out&#34;, &#34;header&#34; and &#34;data&#34; arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. This could be exploited by an attacker who has the ability to supply malicious PEM files for parsing to achieve a denial of service attack. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. These locations include the PEM_read_bio_TYPE() functions as well as the decoders introduced in OpenSSL 3.0. The OpenSSL asn1parse command line application is also impacted by this issue.(CVE-2022-4450)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="nodejs-devel" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-devel-12.22.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="npm" release="1.12.22.11.4.oe2203sp1" version="6.14.16">
                         <filename>npm-6.14.16-1.12.22.11.4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="v8-devel" release="1.12.22.11.4.oe2203sp1" version="7.8.279.23">
                         <filename>v8-devel-7.8.279.23-1.12.22.11.4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="nodejs" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-12.22.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="nodejs-debuginfo" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-debuginfo-12.22.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="nodejs-full-i18n" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-full-i18n-12.22.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="nodejs-debugsource" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-debugsource-12.22.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="nodejs-libs" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-libs-12.22.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="nodejs-docs" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-docs-12.22.11-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="nodejs-debugsource" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-debugsource-12.22.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="nodejs-libs" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-libs-12.22.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="nodejs-full-i18n" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-full-i18n-12.22.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="nodejs-devel" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-devel-12.22.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="npm" release="1.12.22.11.4.oe2203sp1" version="6.14.16">
                         <filename>npm-6.14.16-1.12.22.11.4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="v8-devel" release="1.12.22.11.4.oe2203sp1" version="7.8.279.23">
                         <filename>v8-devel-7.8.279.23-1.12.22.11.4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="nodejs-debuginfo" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-debuginfo-12.22.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="nodejs" release="4.oe2203sp1" version="12.22.11">
                         <filename>nodejs-12.22.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1147</id>
          <title>An update for containerd is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-04"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25153" id="CVE-2023-25153" title="CVE-2023-25153" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25173" id="CVE-2023-25173" title="CVE-2023-25173" type="cve"></reference>
          </references>
          <description>containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of service. This bug has been fixed in containerd 1.6.18 and 1.5.18. Users should update to these versions to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.(CVE-2023-25153)containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. Downstream applications that use the containerd client library may be affected as well. This bug has been fixed in containerd v1.6.18 and v.1.5.18. Users should update to these versions and recreate containers to resolve this issue. Users who rely on a downstream application that uses containerd&#39;s client library should check that application for a separate advisory and instructions. As a workaround, ensure that the `&#34;USER $USERNAME&#34;` Dockerfile instruction is not used. Instead, set the container entrypoint to a value similar to `ENTRYPOINT [&#34;su&#34;, &#34;-&#34;, &#34;user&#34;]` to allow `su` to properly set up supplementary groups.(CVE-2023-25173)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="containerd" release="309.oe2203sp1" version="1.2.0">
                         <filename>containerd-1.2.0-309.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="containerd" release="309.oe2203sp1" version="1.2.0">
                         <filename>containerd-1.2.0-309.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1148</id>
          <title>An update for emacs is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-04"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48339" id="CVE-2022-48339" title="CVE-2022-48339" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48338" id="CVE-2022-48338" title="CVE-2022-48338" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48337" id="CVE-2022-48337" title="CVE-2022-48337" type="cve"></reference>
          </references>
          <description>An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be executed.(CVE-2022-48339)An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The ruby-find-library-file function is an interactive function, and bound to C-c C-f. Inside the function, the external command gem is called through shell-command-to-string, but the feature-name parameters are not escaped. Thus, malicious Ruby source files may cause commands to be executed.(CVE-2022-48338)GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the &#34;etags -u *&#34; command (suggested in the etags documentation) in a situation where the current working directory has contents that depend on untrusted input.(CVE-2022-48337)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="emacs-devel" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-devel-27.2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-lucid" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-lucid-27.2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-debuginfo" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-debuginfo-27.2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-common" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-common-27.2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-debugsource" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-debugsource-27.2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-27.2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-nox" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-nox-27.2-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="emacs-terminal" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-terminal-27.2-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="emacs-filesystem" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-filesystem-27.2-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="emacs-help" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-help-27.2-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-common" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-common-27.2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-debugsource" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-debugsource-27.2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-devel" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-devel-27.2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-lucid" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-lucid-27.2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-27.2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-debuginfo" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-debuginfo-27.2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-nox" release="9.oe2203sp1" version="27.2">
                         <filename>emacs-nox-27.2-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1149</id>
          <title>An update for amanda is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-03-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-37705" id="CVE-2022-37705" title="CVE-2022-37705" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-37704" id="CVE-2022-37704" title="CVE-2022-37704" type="cve"></reference>
          </references>
          <description>A flaw was found in Amanda. The `runtar` SUID binary executes /usr/bin/tar as root without properly validating its arguments, possibly leading to escalation of privileges from the regular user &#34;amandabackup&#34; to root.(CVE-2022-37705)A flaw was found in Amanda. The `rundump` SUID binary executes /usr/sbin/dump as root without properly validating its arguments, possibly leading to escalation of privileges from the regular user &#34;amandabackup&#34; to root.(CVE-2022-37704)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="amanda-debugsource" release="23.oe2203sp1" version="3.5.1">
                         <filename>amanda-debugsource-3.5.1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="amanda-debuginfo" release="23.oe2203sp1" version="3.5.1">
                         <filename>amanda-debuginfo-3.5.1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="amanda" release="23.oe2203sp1" version="3.5.1">
                         <filename>amanda-3.5.1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="amanda-help" release="23.oe2203sp1" version="3.5.1">
                         <filename>amanda-help-3.5.1-23.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="amanda-debugsource" release="23.oe2203sp1" version="3.5.1">
                         <filename>amanda-debugsource-3.5.1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="amanda" release="23.oe2203sp1" version="3.5.1">
                         <filename>amanda-3.5.1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="amanda-debuginfo" release="23.oe2203sp1" version="3.5.1">
                         <filename>amanda-debuginfo-3.5.1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1151</id>
          <title>An update for libreswan is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23009" id="CVE-2023-23009" title="CVE-2023-23009" type="cve"></reference>
          </references>
          <description>Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.(CVE-2023-23009)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libreswan" release="3.oe2203sp1" version="4.5">
                         <filename>libreswan-4.5-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libreswan-help" release="3.oe2203sp1" version="4.5">
                         <filename>libreswan-help-4.5-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libreswan-debuginfo" release="3.oe2203sp1" version="4.5">
                         <filename>libreswan-debuginfo-4.5-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libreswan-debugsource" release="3.oe2203sp1" version="4.5">
                         <filename>libreswan-debugsource-4.5-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libreswan" release="3.oe2203sp1" version="4.5">
                         <filename>libreswan-4.5-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libreswan-help" release="3.oe2203sp1" version="4.5">
                         <filename>libreswan-help-4.5-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libreswan-debuginfo" release="3.oe2203sp1" version="4.5">
                         <filename>libreswan-debuginfo-4.5-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libreswan-debugsource" release="3.oe2203sp1" version="4.5">
                         <filename>libreswan-debugsource-4.5-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1154</id>
          <title>An update for rubygem-activesupport is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-22796" id="CVE-2023-22796" title="CVE-2023-22796" type="cve"></reference>
          </references>
          <description>A regular expression based DoS vulnerability in Active Support &lt;6.1.7.1 and &lt;7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability.(CVE-2023-22796)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="noarch" name="rubygem-activesupport" release="3.oe2203sp1" version="6.1.4.1">
                         <filename>rubygem-activesupport-6.1.4.1-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="rubygem-activesupport-doc" release="3.oe2203sp1" version="6.1.4.1">
                         <filename>rubygem-activesupport-doc-6.1.4.1-3.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1155</id>
          <title>An update for apache-commons-fileupload is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24998" id="CVE-2023-24998" title="CVE-2023-24998" type="cve"></reference>
          </references>
          <description>Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.(CVE-2023-24998)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="apache-commons-fileupload" release="2.oe2203sp1" version="1.4">
                         <filename>apache-commons-fileupload-1.4-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="apache-commons-fileupload-help" release="2.oe2203sp1" version="1.4">
                         <filename>apache-commons-fileupload-help-1.4-2.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1157</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0240" id="CVE-2023-0240" title="CVE-2023-0240" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0615" id="CVE-2023-0615" title="CVE-2023-0615" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0045" id="CVE-2023-0045" title="CVE-2023-0045" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23586" id="CVE-2023-23586" title="CVE-2023-23586" type="cve"></reference>
          </references>
          <description>There is a logic error in io_uring&#39;s implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the io_prep_async_work function the assumption that the last io_grab_identity call cannot return false is not true, and in this case the function will use the init_cred or the previous linked requests identity to do operations instead of using the current identity. This can lead to reference counting issues causing use-after-free. We recommend upgrading past version 5.10.161.(CVE-2023-0240)A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled.(CVE-2023-0615)The Linux kernel does not correctly mitigate SMT attacks, as discoveredthrough a strange pattern in the kernel API using STIBP as a mitigation[1&lt;https://docs.kernel.org/userspace-api/spec_ctrl.html&gt;], leaving theprocess exposed for a short period of time after a syscall. The kernel alsodoes not issue an IBPB immediately during the syscall.The ib_prctl_set [2&lt;https://elixir.bootlin.com/linux/v5.15.56/source/arch/x86/kernel/cpu/bugs.c#L1467&gt;]functionupdates the Thread Information Flags (TIFs) for the task and updates theSPEC_CTRL MSR on the function __speculation_ctrl_update [3&lt;https://elixir.bootlin.com/linux/v5.15.56/source/arch/x86/kernel/process.c#L557&gt;],but the IBPB is only issued on the next schedule, when the TIF bits arechecked. This leaves the victim vulnerable to values already injected onthe BTB, prior to the prctl syscall.The behavior is only corrected after a reschedule of the task happens.Furthermore, the kernel entrance (due to the syscall itself), does notissue an IBPB in the default scenarios (i.e., when the kernel protectsitself via retpoline or eIBRS).(CVE-2023-0045)Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_threaded to determine if the current process is single-threaded, but this call does not consider io_uring&#39;s io_worker threads, thus it is possible to insert a time namespace&#39;s vvar page to process&#39;s memory space via a page fault. When this time namespace is destroyed, the vvar page is also freed, but not removed from the process&#39; memory, and a next page allocated by the kernel will be still available from the user-space process and can leak memory contents via this (read-only) use-after-free vulnerability. We recommend upgrading past version 5.10.161 or commit 788d0824269bef539fe31a785b1517882eafed93 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring(CVE-2023-23586)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python3-perf" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.21.0.97.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.21.0.97.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.21.0.97.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1158</id>
          <title>An update for libksba is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-03-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-47629" id="CVE-2022-47629" title="CVE-2022-47629" type="cve"></reference>
          </references>
          <description>Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.(CVE-2022-47629)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libksba" release="3.oe2203sp1" version="1.6.0">
                         <filename>libksba-1.6.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libksba-debuginfo" release="3.oe2203sp1" version="1.6.0">
                         <filename>libksba-debuginfo-1.6.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libksba-devel" release="3.oe2203sp1" version="1.6.0">
                         <filename>libksba-devel-1.6.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libksba-debugsource" release="3.oe2203sp1" version="1.6.0">
                         <filename>libksba-debugsource-1.6.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libksba-help" release="3.oe2203sp1" version="1.6.0">
                         <filename>libksba-help-1.6.0-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libksba-debugsource" release="3.oe2203sp1" version="1.6.0">
                         <filename>libksba-debugsource-1.6.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libksba" release="3.oe2203sp1" version="1.6.0">
                         <filename>libksba-1.6.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libksba-debuginfo" release="3.oe2203sp1" version="1.6.0">
                         <filename>libksba-debuginfo-1.6.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libksba-devel" release="3.oe2203sp1" version="1.6.0">
                         <filename>libksba-devel-1.6.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1159</id>
          <title>An update for pesign is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3560" id="CVE-2022-3560" title="CVE-2022-3560" type="cve"></reference>
          </references>
          <description>A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the &#39;pesign&#39; group. However, the script doesn&#39;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.(CVE-2022-3560)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="pesign-debugsource" release="4.oe2203sp1" version="115">
                         <filename>pesign-debugsource-115-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pesign-help" release="4.oe2203sp1" version="115">
                         <filename>pesign-help-115-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pesign" release="4.oe2203sp1" version="115">
                         <filename>pesign-115-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pesign-debuginfo" release="4.oe2203sp1" version="115">
                         <filename>pesign-debuginfo-115-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pesign-debuginfo" release="4.oe2203sp1" version="115">
                         <filename>pesign-debuginfo-115-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pesign-debugsource" release="4.oe2203sp1" version="115">
                         <filename>pesign-debugsource-115-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pesign" release="4.oe2203sp1" version="115">
                         <filename>pesign-115-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pesign-help" release="4.oe2203sp1" version="115">
                         <filename>pesign-help-115-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1160</id>
          <title>An update for sudo is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Low</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-27320" id="CVE-2023-27320" title="CVE-2023-27320" type="cve"></reference>
          </references>
          <description>Sudo before 1.9.13p2 has a double free in the per-command chroot feature.(CVE-2023-27320)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="sudo-devel" release="10.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-devel-1.9.8p2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sudo-debuginfo" release="10.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debuginfo-1.9.8p2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sudo-debugsource" release="10.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debugsource-1.9.8p2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sudo" release="10.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-1.9.8p2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="sudo-help" release="10.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-help-1.9.8p2-10.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo-debugsource" release="10.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debugsource-1.9.8p2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo-debuginfo" release="10.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debuginfo-1.9.8p2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo-devel" release="10.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-devel-1.9.8p2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo" release="10.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-1.9.8p2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1161</id>
          <title>An update for httpd is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-27522" id="CVE-2023-27522" title="CVE-2023-27522" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25690" id="CVE-2023-25690" title="CVE-2023-25690" type="cve"></reference>
          </references>
          <description>HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.(CVE-2023-27522)Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the user-supplied request-target (URL) data and is then re-inserted into the proxied request-target using variable substitution. For example, something like: RewriteEngine on RewriteRule &#34;^/here/(.*)&#34; &#34;http://example.com:8080/elsewhere?$1&#34;; [P] ProxyPassReverse /here/ http://example.com:8080/ Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at least version 2.4.56 of Apache HTTP Server.(CVE-2023-25690)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="mod_proxy_html" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_proxy_html-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mod_md" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_md-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="mod_ssl" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_ssl-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="httpd-devel" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-devel-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="httpd-debuginfo" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-debuginfo-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mod_session" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_session-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="httpd-debugsource" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-debugsource-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mod_ldap" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_ldap-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="httpd-tools" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-tools-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="httpd" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-2.4.51-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="httpd-filesystem" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-filesystem-2.4.51-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="httpd-help" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-help-2.4.51-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mod_md" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_md-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd-devel" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-devel-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mod_session" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_session-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd-debuginfo" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-debuginfo-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd-debugsource" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-debugsource-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mod_ldap" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_ldap-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="mod_proxy_html" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_proxy_html-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="mod_ssl" release="15.oe2203sp1" version="2.4.51">
                         <filename>mod_ssl-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="httpd-tools" release="15.oe2203sp1" version="2.4.51">
                         <filename>httpd-tools-2.4.51-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1163</id>
          <title>An update for snakeyaml is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-25857" id="CVE-2022-25857" title="CVE-2022-25857" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-38749" id="CVE-2022-38749" title="CVE-2022-38749" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-38750" id="CVE-2022-38750" title="CVE-2022-38750" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-38751" id="CVE-2022-38751" title="CVE-2022-38751" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-38752" id="CVE-2022-38752" title="CVE-2022-38752" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41854" id="CVE-2022-41854" title="CVE-2022-41854" type="cve"></reference>
          </references>
          <description>The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.(CVE-2022-25857)Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38749)Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38750)Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38751)Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.(CVE-2022-38752)Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.(CVE-2022-41854)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="snakeyaml" release="1.oe2203sp1" version="1.32">
                         <filename>snakeyaml-1.32-1.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="snakeyaml-javadoc" release="1.oe2203sp1" version="1.32">
                         <filename>snakeyaml-javadoc-1.32-1.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1168</id>
          <title>An update for vim is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1170" id="CVE-2023-1170" title="CVE-2023-1170" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1175" id="CVE-2023-1175" title="CVE-2023-1175" type="cve"></reference>
          </references>
          <description>Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.(CVE-2023-1170)Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.(CVE-2023-1175)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="vim-common" release="11.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-enhanced" release="11.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-minimal" release="11.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debuginfo" release="11.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debugsource" release="11.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-X11" release="11.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="noarch" name="vim-filesystem" release="11.oe2203sp1" version="9.0">
                         <filename>vim-filesystem-9.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-enhanced" release="11.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debuginfo" release="11.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-minimal" release="11.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-X11" release="11.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-common" release="11.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debugsource" release="11.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1169</id>
          <title>An update for clamav is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-20032" id="CVE-2023-20032" title="CVE-2023-20032" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-20052" id="CVE-2023-20052" title="CVE-2023-20052" type="cve"></reference>
          </references>
          <description>On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code. This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the ClamAV scanning process, or else crash the process, resulting in a denial of service (DoS) condition. For a description of this vulnerability, see the ClamAV blog [&#34;https://blog.clamav.net/&#34;].(CVE-2023-20032)On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process.(CVE-2023-20052)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="clamav-devel" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-devel-0.103.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="clamav-update" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-update-0.103.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="clamav-debuginfo" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-debuginfo-0.103.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="clamav-debugsource" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-debugsource-0.103.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="clamav-help" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-help-0.103.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="clamav" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-0.103.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="clamd" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamd-0.103.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="clamav-milter" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-milter-0.103.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="clamav-filesystem" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-filesystem-0.103.8-1.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="clamav-data" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-data-0.103.8-1.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="clamav-devel" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-devel-0.103.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="clamav-help" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-help-0.103.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="clamav-debuginfo" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-debuginfo-0.103.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="clamav-milter" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-milter-0.103.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="clamav" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-0.103.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="clamav-update" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-update-0.103.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="clamav-debugsource" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamav-debugsource-0.103.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="clamd" release="1.oe2203sp1" version="0.103.8">
                         <filename>clamd-0.103.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1170</id>
          <title>An update for glusterfs is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26253" id="CVE-2023-26253" title="CVE-2023-26253" type="cve"></reference>
          </references>
          <description>In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.(CVE-2023-26253)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libgfxdr-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libgfxdr-devel-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-geo-replication" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-geo-replication-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-debugsource" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-debugsource-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-fuse" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-fuse-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libglusterd0" release="8.oe2203sp1" version="10.0">
                         <filename>libglusterd0-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libgfapi0" release="8.oe2203sp1" version="10.0">
                         <filename>libgfapi0-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libglusterfs0" release="8.oe2203sp1" version="10.0">
                         <filename>libglusterfs0-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-events" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-events-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-cloudsync-plugins" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-cloudsync-plugins-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libgfxdr0" release="8.oe2203sp1" version="10.0">
                         <filename>libgfxdr0-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-gluster" release="8.oe2203sp1" version="10.0">
                         <filename>python3-gluster-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-extra-xlators" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-extra-xlators-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-server" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-server-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libgfrpc-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libgfrpc-devel-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-client-xlators" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-client-xlators-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libgfrpc0" release="8.oe2203sp1" version="10.0">
                         <filename>libgfrpc0-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libglusterfs-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libglusterfs-devel-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-debuginfo" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-debuginfo-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-help" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-help-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-cli" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-cli-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs-thin-arbiter" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-thin-arbiter-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libgfapi-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libgfapi-devel-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glusterfs" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libgfchangelog-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libgfchangelog-devel-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libgfchangelog0" release="8.oe2203sp1" version="10.0">
                         <filename>libgfchangelog0-10.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="glusterfs-resource-agents" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-resource-agents-10.0-8.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libglusterfs-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libglusterfs-devel-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libgfchangelog0" release="8.oe2203sp1" version="10.0">
                         <filename>libgfchangelog0-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-cli" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-cli-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-debuginfo" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-debuginfo-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-extra-xlators" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-extra-xlators-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-server" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-server-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-client-xlators" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-client-xlators-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libgfrpc-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libgfrpc-devel-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-geo-replication" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-geo-replication-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libgfxdr-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libgfxdr-devel-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libglusterd0" release="8.oe2203sp1" version="10.0">
                         <filename>libglusterd0-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libgfchangelog-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libgfchangelog-devel-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-fuse" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-fuse-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-thin-arbiter" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-thin-arbiter-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libgfapi-devel" release="8.oe2203sp1" version="10.0">
                         <filename>libgfapi-devel-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-gluster" release="8.oe2203sp1" version="10.0">
                         <filename>python3-gluster-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-debugsource" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-debugsource-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-help" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-help-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libgfrpc0" release="8.oe2203sp1" version="10.0">
                         <filename>libgfrpc0-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libglusterfs0" release="8.oe2203sp1" version="10.0">
                         <filename>libglusterfs0-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libgfxdr0" release="8.oe2203sp1" version="10.0">
                         <filename>libgfxdr0-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libgfapi0" release="8.oe2203sp1" version="10.0">
                         <filename>libgfapi0-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-cloudsync-plugins" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-cloudsync-plugins-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glusterfs-events" release="8.oe2203sp1" version="10.0">
                         <filename>glusterfs-events-10.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1171</id>
          <title>An update for libmicrohttpd is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-27371" id="CVE-2023-27371" title="CVE-2023-27371" type="cve"></reference>
          </references>
          <description>GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more &#39;\0&#39; bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.(CVE-2023-27371)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="libmicrohttpd-debuginfo" release="4.oe2203sp1" version="0.9.75">
                         <filename>libmicrohttpd-debuginfo-0.9.75-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="libmicrohttpd-debugsource" release="4.oe2203sp1" version="0.9.75">
                         <filename>libmicrohttpd-debugsource-0.9.75-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="libmicrohttpd-devel" release="4.oe2203sp1" version="0.9.75">
                         <filename>libmicrohttpd-devel-0.9.75-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="libmicrohttpd" release="4.oe2203sp1" version="0.9.75">
                         <filename>libmicrohttpd-0.9.75-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="libmicrohttpd-help" release="4.oe2203sp1" version="0.9.75">
                         <filename>libmicrohttpd-help-0.9.75-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="libmicrohttpd-debugsource" release="4.oe2203sp1" version="0.9.75">
                         <filename>libmicrohttpd-debugsource-0.9.75-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="libmicrohttpd-debuginfo" release="4.oe2203sp1" version="0.9.75">
                         <filename>libmicrohttpd-debuginfo-0.9.75-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="libmicrohttpd-devel" release="4.oe2203sp1" version="0.9.75">
                         <filename>libmicrohttpd-devel-0.9.75-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="libmicrohttpd" release="4.oe2203sp1" version="0.9.75">
                         <filename>libmicrohttpd-0.9.75-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1175</id>
          <title>An update for epiphany is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26081" id="CVE-2023-26081" title="CVE-2023-26081" type="cve"></reference>
          </references>
          <description>In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts.(CVE-2023-26081)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="epiphany" release="3.oe2203sp1" version="40.6">
                         <filename>epiphany-40.6-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="epiphany-runtime" release="3.oe2203sp1" version="40.6">
                         <filename>epiphany-runtime-40.6-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="epiphany-debugsource" release="3.oe2203sp1" version="40.6">
                         <filename>epiphany-debugsource-40.6-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="epiphany-debuginfo" release="3.oe2203sp1" version="40.6">
                         <filename>epiphany-debuginfo-40.6-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="epiphany-runtime" release="3.oe2203sp1" version="40.6">
                         <filename>epiphany-runtime-40.6-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="epiphany-debuginfo" release="3.oe2203sp1" version="40.6">
                         <filename>epiphany-debuginfo-40.6-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="epiphany-debugsource" release="3.oe2203sp1" version="40.6">
                         <filename>epiphany-debugsource-40.6-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="epiphany" release="3.oe2203sp1" version="40.6">
                         <filename>epiphany-40.6-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1176</id>
          <title>An update for future is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-40899" id="CVE-2022-40899" title="CVE-2022-40899" type="cve"></reference>
          </references>
          <description>An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.(CVE-2022-40899)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python3-future" release="2.oe2203sp1" version="0.18.2">
                         <filename>python3-future-0.18.2-2.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1178</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-20938" id="CVE-2023-20938" title="CVE-2023-20938" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0461" id="CVE-2023-0461" title="CVE-2023-0461" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26607" id="CVE-2023-26607" title="CVE-2023-26607" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1075" id="CVE-2023-1075" title="CVE-2023-1075" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1078" id="CVE-2023-1078" title="CVE-2023-1078" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1076" id="CVE-2023-1076" title="CVE-2023-1076" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-22995" id="CVE-2023-22995" title="CVE-2023-22995" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1118" id="CVE-2023-1118" title="CVE-2023-1118" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26545" id="CVE-2023-26545" title="CVE-2023-26545" type="cve"></reference>
          </references>
          <description>In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257685302References: Upstream kernel(CVE-2023-20938)There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c(CVE-2023-0461)In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.(CVE-2023-26607)A flaw in the Linux Kernel found. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec-&gt;tx_ready.Reference:https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=ffe2a22562444720b05bdfeb999c03e810d84cbb(CVE-2023-1075)A flaw found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user.It is known how to trigger this, which causes an OOB access, and a lock corruption.Reference:https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=f753a68980cf4b59a80fe677619da2b1804f526d(CVE-2023-1078)A flaw found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function.While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability.This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.References:https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=66b2c338adce580dfce2199591e65e2bab889cffhttps://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=a096ccca6e503a5c575717ff8a36ace27510ab0a(CVE-2023-1076)In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls.(CVE-2023-22995)A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.(CVE-2023-1118)In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device.(CVE-2023-26545)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.22.0.98.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.22.0.98.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.22.0.98.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1179</id>
          <title>An update for vim is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-03-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1264" id="CVE-2023-1264" title="CVE-2023-1264" type="cve"></reference>
          </references>
          <description>NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.(CVE-2023-1264)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="vim-enhanced" release="12.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-12.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-common" release="12.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-12.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-X11" release="12.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-12.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debuginfo" release="12.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-12.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-minimal" release="12.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-12.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debugsource" release="12.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-12.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="noarch" name="vim-filesystem" release="12.oe2203sp1" version="9.0">
                         <filename>vim-filesystem-9.0-12.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-minimal" release="12.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-12.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-common" release="12.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-12.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-X11" release="12.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-12.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debuginfo" release="12.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-12.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debugsource" release="12.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-12.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-enhanced" release="12.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-12.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1180</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-03-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1074" id="CVE-2023-1074" title="CVE-2023-1074" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1079" id="CVE-2023-1079" title="CVE-2023-1079" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1073" id="CVE-2023-1073" title="CVE-2023-1073" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1382" id="CVE-2023-1382" title="CVE-2023-1382" type="cve"></reference>
          </references>
          <description>A flaw in the Linux Kernel found. Fail if no bound addresses can be used for a given scope. A type confusion can happen in inet_diag_msg_sctpasoc_fill() in net/sctp/diag.c, which uses a type confused pointer to return information to userspace when issuing a list_entry() on asoc-&gt;base.bind_addr.address_list.next when the list is empty.References:https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=458e279f861d3f61796894cd158b780765a1569fhttps://www.openwall.com/lists/oss-security/2023/01/23/1(CVE-2023-1074)A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device.Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.Reference:https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=4ab3a086d10eeec1424f2e8a968827a6336203df(CVE-2023-1079)A flaw found in the Linux Kernel. The missing check causes a type confusion when issuing a list_entry()on an empty report_list. The problem is caused by the assumption that the device must have valid report_list. While this will be true for all normal HID devices, a suitably malicious device can violate the assumption.References:https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=b12fece4c64857e5fab4290bf01b2e0317a88456https://www.openwall.com/lists/oss-security/2023/01/17/3(CVE-2023-1073)Kernel: denial of service in tipc_conn_close(CVE-2023-1382)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-headers" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.24.0.100.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.24.0.100.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.24.0.100.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1183</id>
          <title>An update for poppler is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-03-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-27337" id="CVE-2022-27337" title="CVE-2022-27337" type="cve"></reference>
          </references>
          <description>A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.(CVE-2022-27337)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="poppler-qt5" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-qt5-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler-utils" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-utils-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler-glib-devel" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-glib-devel-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler-glib" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-glib-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler-qt5-devel" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-qt5-devel-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler-debuginfo" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-debuginfo-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler-debugsource" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-debugsource-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler-devel" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-devel-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler-cpp-devel" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-cpp-devel-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="poppler-cpp" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-cpp-0.90.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="poppler-glib-doc" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-glib-doc-0.90.0-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="poppler-help" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-help-0.90.0-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-debuginfo" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-debuginfo-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-devel" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-devel-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-glib" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-glib-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-glib-devel" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-glib-devel-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-cpp-devel" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-cpp-devel-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-cpp" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-cpp-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-qt5" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-qt5-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-qt5-devel" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-qt5-devel-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-utils" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-utils-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="poppler-debugsource" release="4.oe2203sp1" version="0.90.0">
                         <filename>poppler-debugsource-0.90.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1184</id>
          <title>An update for redis is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-03-31"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-36021" id="CVE-2022-36021" title="CVE-2022-36021" type="cve"></reference>
          </references>
          <description>Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` or `KEYS`) with a specially crafted pattern to trigger a denial-of-service attack on Redis, causing it to hang and consume 100% CPU time. The problem is fixed in Redis versions 6.0.18, 6.2.11, 7.0.9.(CVE-2022-36021)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="redis-debuginfo" release="2.oe2203sp1" version="4.0.14">
                         <filename>redis-debuginfo-4.0.14-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="redis" release="2.oe2203sp1" version="4.0.14">
                         <filename>redis-4.0.14-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="redis-debugsource" release="2.oe2203sp1" version="4.0.14">
                         <filename>redis-debugsource-4.0.14-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="redis-debugsource" release="2.oe2203sp1" version="4.0.14">
                         <filename>redis-debugsource-4.0.14-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="redis-debuginfo" release="2.oe2203sp1" version="4.0.14">
                         <filename>redis-debuginfo-4.0.14-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="redis" release="2.oe2203sp1" version="4.0.14">
                         <filename>redis-4.0.14-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1185</id>
          <title>An update for emacs is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-03-31"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28617" id="CVE-2023-28617" title="CVE-2023-28617" type="cve"></reference>
          </references>
          <description>org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.(CVE-2023-28617)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="emacs" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-27.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-common" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-common-27.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-nox" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-nox-27.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-debuginfo" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-debuginfo-27.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-debugsource" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-debugsource-27.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-lucid" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-lucid-27.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="emacs-devel" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-devel-27.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="emacs-terminal" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-terminal-27.2-10.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="emacs-help" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-help-27.2-10.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="emacs-filesystem" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-filesystem-27.2-10.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-debuginfo" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-debuginfo-27.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-nox" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-nox-27.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-27.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-lucid" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-lucid-27.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-debugsource" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-debugsource-27.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-common" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-common-27.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="emacs-devel" release="10.oe2203sp1" version="27.2">
                         <filename>emacs-devel-27.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1186</id>
          <title>An update for libfastjson is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-31"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2020-12762" id="CVE-2020-12762" title="CVE-2020-12762" type="cve"></reference>
          </references>
          <description>json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.(CVE-2020-12762)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libfastjson" release="3.oe2203sp1" version="0.99.9">
                         <filename>libfastjson-0.99.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libfastjson-debugsource" release="3.oe2203sp1" version="0.99.9">
                         <filename>libfastjson-debugsource-0.99.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libfastjson-debuginfo" release="3.oe2203sp1" version="0.99.9">
                         <filename>libfastjson-debuginfo-0.99.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libfastjson-devel" release="3.oe2203sp1" version="0.99.9">
                         <filename>libfastjson-devel-0.99.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libfastjson-debuginfo" release="3.oe2203sp1" version="0.99.9">
                         <filename>libfastjson-debuginfo-0.99.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libfastjson" release="3.oe2203sp1" version="0.99.9">
                         <filename>libfastjson-0.99.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libfastjson-debugsource" release="3.oe2203sp1" version="0.99.9">
                         <filename>libfastjson-debugsource-0.99.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libfastjson-devel" release="3.oe2203sp1" version="0.99.9">
                         <filename>libfastjson-devel-0.99.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1190</id>
          <title>An update for wireshark is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-31"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1161" id="CVE-2023-1161" title="CVE-2023-1161" type="cve"></reference>
          </references>
          <description>ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file(CVE-2023-1161)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="wireshark-debuginfo" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-devel" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debugsource" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-help" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debuginfo" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-help" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-devel" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debugsource" release="2.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1191</id>
          <title>An update for liblouis is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-31"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26769" id="CVE-2023-26769" title="CVE-2023-26769" type="cve"></reference>
          </references>
          <description>Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.(CVE-2023-26769)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="liblouis-debugsource" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-debugsource-3.7.0-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="liblouis-debuginfo" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-debuginfo-3.7.0-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="liblouis-devel" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-devel-3.7.0-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="liblouis" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-3.7.0-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="liblouis-utils" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-utils-3.7.0-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-louis" release="5.oe2203sp1" version="3.7.0">
                         <filename>python3-louis-3.7.0-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="liblouis-help" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-help-3.7.0-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="liblouis" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-3.7.0-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="liblouis-debugsource" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-debugsource-3.7.0-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="liblouis-utils" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-utils-3.7.0-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="liblouis-devel" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-devel-3.7.0-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="liblouis-debuginfo" release="5.oe2203sp1" version="3.7.0">
                         <filename>liblouis-debuginfo-3.7.0-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1192</id>
          <title>An update for golang is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-03-31"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41723" id="CVE-2022-41723" title="CVE-2022-41723" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41724" id="CVE-2022-41724" title="CVE-2022-41724" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41725" id="CVE-2022-41725" title="CVE-2022-41725" type="cve"></reference>
          </references>
          <description>A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.(CVE-2022-41723)Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth &gt;= RequestClientCert).(CVE-2022-41724)A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing &#34;up to maxMemory bytes +10MB (reserved for non-file parts) in memory&#34;. File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type&#39;s documentation states, &#34;If stored on disk, the File&#39;s underlying concrete type will be an *os.File.&#34;. This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.(CVE-2022-41725)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="golang" release="15.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-devel" release="15.oe2203sp1" version="1.17.3">
                         <filename>golang-devel-1.17.3-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-help" release="15.oe2203sp1" version="1.17.3">
                         <filename>golang-help-1.17.3-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="golang" release="15.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1193</id>
          <title>An update for curl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-03-31"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-27535" id="CVE-2023-27535" title="CVE-2023-27535" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-27538" id="CVE-2023-27538" title="CVE-2023-27538" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-27536" id="CVE-2023-27536" title="CVE-2023-27536" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-27533" id="CVE-2023-27533" title="CVE-2023-27533" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-27534" id="CVE-2023-27534" title="CVE-2023-27534" type="cve"></reference>
          </references>
          <description>libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, several FTP settings were left out from the configuration match checks, making them match too easily. The settings in questions are `CURLOPT_FTP_ACCOUNT`, `CURLOPT_FTP_ALTERNATIVE_TO_USER`, `CURLOPT_FTP_SSL_CCC` and `CURLOPT_USE_SSL` level.(CVE-2023-27535)libcurl would reuse a previously created connection even when an SSH related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, two SSH settings were left out from the configuration match checks, making them match too easily.(CVE-2023-27538)libcurl would reuse a previously created connection even when the GSS delegation (`CURLOPT_GSSAPI_DELEGATION`) option had been changed that could have changed the user&#39;s permissions in a second transfer. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, this GSS delegation setting was left out from the configuration match checks, making them match too easily, affecting krb5/kerberos/negotiate/GSSAPI transfers.(CVE-2023-27536)curl supports communicating using the TELNET protocol and as a part of this it offers users to pass on user name and &#34;telnet options&#34; for the servernegotiation. Due to lack of proper input scrubbing and without it being the documented functionality, curl would pass on user name and telnet options to the server as provided. This could allow users to pass in carefully crafted content that pass on content or do option negotiation without the application intending to do so. In particular if an application for example allows users to provide the data or parts of the data.(CVE-2023-27533)curl supports SFTP transfers. curl&#39;s SFTP implementation offers a special feature in the path component of URLs: a tilde (`~`) character as the firstpath element in the path to denotes a path relative to the user&#39;s home directory. This is supported because of wording in the [once proposedto-become RFC draft](https://datatracker.ietf.org/doc/html/draft-ietf-secsh-scp-sftp-ssh-uri-04) that was to dictate how SFTP URLs work. Due to a bug, the handling of the tilde in SFTP path did however not only replace it when it is used stand-alone as the first path element but also wrongly when used as a mere prefix in the first element. Using a path like `/~2/foo` when accessing a server using the user `dan` (with home directory `/home/dan`) would then quite suprisingly access the file `/home/dan2/foo`. This can be taken advantage of to circumvent filtering or worse.(CVE-2023-27534)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libcurl" release="15.oe2203sp1" version="7.79.1">
                         <filename>libcurl-7.79.1-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl" release="15.oe2203sp1" version="7.79.1">
                         <filename>curl-7.79.1-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl-debugsource" release="15.oe2203sp1" version="7.79.1">
                         <filename>curl-debugsource-7.79.1-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libcurl-devel" release="15.oe2203sp1" version="7.79.1">
                         <filename>libcurl-devel-7.79.1-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl-debuginfo" release="15.oe2203sp1" version="7.79.1">
                         <filename>curl-debuginfo-7.79.1-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="curl-help" release="15.oe2203sp1" version="7.79.1">
                         <filename>curl-help-7.79.1-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcurl-devel" release="15.oe2203sp1" version="7.79.1">
                         <filename>libcurl-devel-7.79.1-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl-debugsource" release="15.oe2203sp1" version="7.79.1">
                         <filename>curl-debugsource-7.79.1-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcurl" release="15.oe2203sp1" version="7.79.1">
                         <filename>libcurl-7.79.1-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl" release="15.oe2203sp1" version="7.79.1">
                         <filename>curl-7.79.1-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl-debuginfo" release="15.oe2203sp1" version="7.79.1">
                         <filename>curl-debuginfo-7.79.1-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1201</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-01"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0266" id="CVE-2023-0266" title="CVE-2023-0266" type="cve"></reference>
          </references>
          <description>A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e(CVE-2023-0266)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-headers" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.26.0.102.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.26.0.102.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.26.0.102.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1202</id>
          <title>An update for undertow is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-07"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1108" id="CVE-2023-1108" title="CVE-2023-1108" type="cve"></reference>
          </references>
          <description>A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.(CVE-2023-1108)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="noarch" name="undertow" release="5.oe2203sp1" version="1.4.0">
                         <filename>undertow-1.4.0-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="undertow-javadoc" release="5.oe2203sp1" version="1.4.0">
                         <filename>undertow-javadoc-1.4.0-5.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1204</id>
          <title>An update for runc is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-11"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25809" id="CVE-2023-25809" title="CVE-2023-25809" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28642" id="CVE-2023-28642" title="CVE-2023-28642" type="cve"></reference>
          </references>
          <description>runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes `/sys/fs/cgroup` writable in following conditons: 1. when runc is executed inside the user namespace, and the `config.json` does not specify the cgroup namespace to be unshared (e.g.., `(docker|podman|nerdctl) run --cgroupns=host`, with Rootless Docker/Podman/nerdctl) or 2. when runc is executed outside the user namespace, and `/sys` is mounted with `rbind, ro` (e.g., `runc spec --rootless`; this condition is very rare). A container may gain the write access to user-owned cgroup hierarchy `/sys/fs/cgroup/user.slice/...` on the host . Other users&#39;s cgroup hierarchies are not affected. Users are advised to upgrade to version 1.1.5. Users unable to upgrade may unshare the cgroup namespace (`(docker|podman|nerdctl) run --cgroupns=private)`. This is the default behavior of Docker/Podman/nerdctl on cgroup v2 hosts. or add `/sys/fs/cgroup` to `maskedPaths`.(CVE-2023-25809)runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.(CVE-2023-28642)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="docker-runc" release="13.oe2203sp1" version="1.1.3">
                         <filename>docker-runc-1.1.3-13.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="docker-runc" release="13.oe2203sp1" version="1.1.3">
                         <filename>docker-runc-1.1.3-13.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1205</id>
          <title>An update for sudo is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-11"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28487" id="CVE-2023-28487" title="CVE-2023-28487" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28486" id="CVE-2023-28486" title="CVE-2023-28486" type="cve"></reference>
          </references>
          <description>Sudo before 1.9.13 does not escape control characters in sudoreplay output.(CVE-2023-28487)Sudo before 1.9.13 does not escape control characters in log messages.(CVE-2023-28486)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="sudo-debugsource" release="11.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debugsource-1.9.8p2-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sudo-debuginfo" release="11.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debuginfo-1.9.8p2-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sudo-devel" release="11.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-devel-1.9.8p2-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sudo" release="11.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-1.9.8p2-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="sudo-help" release="11.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-help-1.9.8p2-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo-debuginfo" release="11.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debuginfo-1.9.8p2-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo" release="11.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-1.9.8p2-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo-debugsource" release="11.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-debugsource-1.9.8p2-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sudo-devel" release="11.oe2203sp1" version="1.9.8p2">
                         <filename>sudo-devel-1.9.8p2-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1206</id>
          <title>An update for glib2 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-11"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25180" id="CVE-2023-25180" title="CVE-2023-25180" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24593" id="CVE-2023-24593" title="CVE-2023-24593" type="cve"></reference>
          </references>
          <description>glib: DoS caused by malicious serialised variant(CVE-2023-25180)glib: DoS caused by handling a malicious text-form variant(CVE-2023-24593)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="glib2-debugsource" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-debugsource-2.72.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glib2-tests" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-tests-2.72.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glib2-static" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-static-2.72.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glib2" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-2.72.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glib2-debuginfo" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-debuginfo-2.72.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="glib2-devel" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-devel-2.72.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="glib2-help" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-help-2.72.2-10.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glib2-debuginfo" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-debuginfo-2.72.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glib2" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-2.72.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glib2-tests" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-tests-2.72.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glib2-debugsource" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-debugsource-2.72.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glib2-devel" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-devel-2.72.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="glib2-static" release="10.oe2203sp1" version="2.72.2">
                         <filename>glib2-static-2.72.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1207</id>
          <title>An update for openssl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-11"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0464" id="CVE-2023-0464" title="CVE-2023-0464" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0465" id="CVE-2023-0465" title="CVE-2023-0465" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0466" id="CVE-2023-0466" title="CVE-2023-0466" type="cve"></reference>
          </references>
          <description>A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy&#39; argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()&#39; function.(CVE-2023-0464)Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. Policy processing is disabled by default but can be enabled by passing the `-policy&#39; argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()&#39; function.(CVE-2023-0465)The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate verification. As suddenly enabling the policy check could break existing deployments it was decided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy() function. Instead the applications that require OpenSSL to perform certificate policy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly enable the policy check by calling X509_VERIFY_PARAM_set_flags() with the X509_V_FLAG_POLICY_CHECK flag argument. Certificate policy checks are disabled by default in OpenSSL and are not commonly used by applications.(CVE-2023-0466)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="openssl-libs" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-debuginfo" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-devel" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-debugsource" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-perl" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="openssl-help" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-help-1.1.1m-20.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debugsource" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-libs" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-devel" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-perl" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debuginfo" release="20.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1208</id>
          <title>An update for hdf5 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-11"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2018-14031" id="CVE-2018-14031" title="CVE-2018-14031" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2018-16438" id="CVE-2018-16438" title="CVE-2018-16438" type="cve"></reference>
          </references>
          <description>An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.(CVE-2018-14031)An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.(CVE-2018-16438)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="hdf5-debuginfo" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-debuginfo-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-debugsource" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-debugsource-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-openmpi-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-devel-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-mpich-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-devel-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-devel-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-openmpi-static" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-static-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-mpich" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-mpich-static" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-static-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-openmpi" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-mpich-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-devel-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-debuginfo" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-debuginfo-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-openmpi" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-devel-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-openmpi-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-devel-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-mpich" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-mpich-static" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-static-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-openmpi-static" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-static-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-debugsource" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-debugsource-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1209</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-11"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23004" id="CVE-2023-23004" title="CVE-2023-23004" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1249" id="CVE-2023-1249" title="CVE-2023-1249" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28327" id="CVE-2023-28327" title="CVE-2023-28327" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28328" id="CVE-2023-28328" title="CVE-2023-28328" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1380" id="CVE-2023-1380" title="CVE-2023-1380" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28466" id="CVE-2023-28466" title="CVE-2023-28466" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48424" id="CVE-2022-48424" title="CVE-2022-48424" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48423" id="CVE-2022-48423" title="CVE-2022-48423" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48425" id="CVE-2022-48425" title="CVE-2022-48425" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1513" id="CVE-2023-1513" title="CVE-2023-1513" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1281" id="CVE-2023-1281" title="CVE-2023-1281" type="cve"></reference>
          </references>
          <description>In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).(CVE-2023-23004)A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 (&#34;coredump: Use the vma snapshot in fill_files_note&#34;) not applied yet, then kernel could be affected.(CVE-2023-1249)A null pointer dereference issue was found in the unix protocol in net/unix/diag.c in Linux before 6.0. In unix_diag_get_exact, the newly allocated skb does not have sk, leading to null pointer. A local user could use this flaw to crash the system or potentially cause a denial of service.Reference:https://lore.kernel.org/netdev/CAO4mrfdvyjFpokhNsiwZiP-wpdSD0AStcJwfKcKQdAALQ9_2Qw@mail.gmail.com/https://lore.kernel.org/netdev/e04315e7c90d9a75613f3993c2baf2d344eef7eb.camel@redhat.com/https://lore.kernel.org/netdev/20221127012412.37969-3-kuniyu@amazon.com/T/(CVE-2023-28327)Kernel: A denial of service issue in  az6027 driver indrivers/media/usb/dev-usb/az6027.c(CVE-2023-28328)A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info-&gt;req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.(CVE-2023-1380)do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).(CVE-2023-28466)In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur.(CVE-2022-48424)In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur.(CVE-2022-48423)In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.(CVE-2022-48425)A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.(CVE-2023-1513)Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when &#39;tcf_exts_exec()&#39; is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.(CVE-2023-1281)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.27.0.103.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.27.0.103.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.27.0.103.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1213</id>
          <title>An update for zstd is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-14"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4899" id="CVE-2022-4899" title="CVE-2022-4899" type="cve"></reference>
          </references>
          <description>A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.(CVE-2022-4899)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="zstd-devel" release="4.oe2203sp1" version="1.5.0">
                         <filename>zstd-devel-1.5.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="zstd-debugsource" release="4.oe2203sp1" version="1.5.0">
                         <filename>zstd-debugsource-1.5.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="zstd" release="4.oe2203sp1" version="1.5.0">
                         <filename>zstd-1.5.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="zstd-debuginfo" release="4.oe2203sp1" version="1.5.0">
                         <filename>zstd-debuginfo-1.5.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="zstd-help" release="4.oe2203sp1" version="1.5.0">
                         <filename>zstd-help-1.5.0-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="zstd-devel" release="4.oe2203sp1" version="1.5.0">
                         <filename>zstd-devel-1.5.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="zstd-debuginfo" release="4.oe2203sp1" version="1.5.0">
                         <filename>zstd-debuginfo-1.5.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="zstd-debugsource" release="4.oe2203sp1" version="1.5.0">
                         <filename>zstd-debugsource-1.5.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="zstd" release="4.oe2203sp1" version="1.5.0">
                         <filename>zstd-1.5.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1216</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-14"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1611" id="CVE-2023-1611" title="CVE-2023-1611" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1670" id="CVE-2023-1670" title="CVE-2023-1670" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1859" id="CVE-2023-1859" title="CVE-2023-1859" type="cve"></reference>
          </references>
          <description>A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea(CVE-2023-1611)A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.(CVE-2023-1670)A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.(CVE-2023-1859)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.28.0.104.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.28.0.104.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.28.0.104.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1219</id>
          <title>An update for sqlite is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2022-12-24"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-46908" id="CVE-2022-46908" title="CVE-2022-46908" type="cve"></reference>
          </references>
          <description>SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.(CVE-2022-46908)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="sqlite-devel" release="5.oe2203sp1" version="3.37.2">
                         <filename>sqlite-devel-3.37.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sqlite-debuginfo" release="5.oe2203sp1" version="3.37.2">
                         <filename>sqlite-debuginfo-3.37.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sqlite-debugsource" release="5.oe2203sp1" version="3.37.2">
                         <filename>sqlite-debugsource-3.37.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sqlite" release="5.oe2203sp1" version="3.37.2">
                         <filename>sqlite-3.37.2-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="sqlite-help" release="5.oe2203sp1" version="3.37.2">
                         <filename>sqlite-help-3.37.2-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sqlite-debuginfo" release="5.oe2203sp1" version="3.37.2">
                         <filename>sqlite-debuginfo-3.37.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sqlite-devel" release="5.oe2203sp1" version="3.37.2">
                         <filename>sqlite-devel-3.37.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sqlite-debugsource" release="5.oe2203sp1" version="3.37.2">
                         <filename>sqlite-debugsource-3.37.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sqlite" release="5.oe2203sp1" version="3.37.2">
                         <filename>sqlite-3.37.2-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1220</id>
          <title>An update for libldb is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-14"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0614" id="CVE-2023-0614" title="CVE-2023-0614" type="cve"></reference>
          </references>
          <description>The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.(CVE-2023-0614)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libldb-debuginfo" release="2.oe2203sp1" version="2.6.1">
                         <filename>libldb-debuginfo-2.6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libldb-debugsource" release="2.oe2203sp1" version="2.6.1">
                         <filename>libldb-debugsource-2.6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python-ldb-devel-common" release="2.oe2203sp1" version="2.6.1">
                         <filename>python-ldb-devel-common-2.6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libldb" release="2.oe2203sp1" version="2.6.1">
                         <filename>libldb-2.6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-ldb" release="2.oe2203sp1" version="2.6.1">
                         <filename>python3-ldb-2.6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libldb-devel" release="2.oe2203sp1" version="2.6.1">
                         <filename>libldb-devel-2.6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-ldb-devel" release="2.oe2203sp1" version="2.6.1">
                         <filename>python3-ldb-devel-2.6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libldb-help" release="2.oe2203sp1" version="2.6.1">
                         <filename>libldb-help-2.6.1-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libldb-debugsource" release="2.oe2203sp1" version="2.6.1">
                         <filename>libldb-debugsource-2.6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-ldb-devel-common" release="2.oe2203sp1" version="2.6.1">
                         <filename>python-ldb-devel-common-2.6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libldb" release="2.oe2203sp1" version="2.6.1">
                         <filename>libldb-2.6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-ldb-devel" release="2.oe2203sp1" version="2.6.1">
                         <filename>python3-ldb-devel-2.6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libldb-debuginfo" release="2.oe2203sp1" version="2.6.1">
                         <filename>libldb-debuginfo-2.6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libldb-devel" release="2.oe2203sp1" version="2.6.1">
                         <filename>libldb-devel-2.6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-ldb" release="2.oe2203sp1" version="2.6.1">
                         <filename>python3-ldb-2.6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1225</id>
          <title>An update for json-smart is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-14"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1370" id="CVE-2023-1370" title="CVE-2023-1370" type="cve"></reference>
          </references>
          <description>[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays and objects is done recursively, nesting too many of them can cause a stack exhaustion (stack overflow) and crash the software.(CVE-2023-1370)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="json-smart" release="2.oe2203sp1" version="2.2">
                         <filename>json-smart-2.2-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="json-smart-javadoc" release="2.oe2203sp1" version="2.2">
                         <filename>json-smart-javadoc-2.2-2.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1226</id>
          <title>An update for ruby is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-14"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28756" id="CVE-2023-28756" title="CVE-2023-28756" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28755" id="CVE-2023-28755" title="CVE-2023-28755" type="cve"></reference>
          </references>
          <description>A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.(CVE-2023-28756)A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.(CVE-2023-28755)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="rubygem-json" release="129.oe2203sp1" version="2.5.1">
                         <filename>rubygem-json-2.5.1-129.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-io-console" release="129.oe2203sp1" version="0.5.7">
                         <filename>rubygem-io-console-0.5.7-129.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-openssl" release="129.oe2203sp1" version="2.2.1">
                         <filename>rubygem-openssl-2.2.1-129.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby-debugsource" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-debugsource-3.0.3-129.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-3.0.3-129.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-psych" release="129.oe2203sp1" version="3.3.2">
                         <filename>rubygem-psych-3.3.2-129.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby-debuginfo" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-debuginfo-3.0.3-129.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby-devel" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-devel-3.0.3-129.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-bigdecimal" release="129.oe2203sp1" version="3.0.0">
                         <filename>rubygem-bigdecimal-3.0.0-129.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rbs" release="129.oe2203sp1" version="1.4.0">
                         <filename>rubygem-rbs-1.4.0-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygems" release="129.oe2203sp1" version="3.2.32">
                         <filename>rubygems-3.2.32-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-power_assert" release="129.oe2203sp1" version="1.2.0">
                         <filename>rubygem-power_assert-1.2.0-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-minitest" release="129.oe2203sp1" version="5.14.2">
                         <filename>rubygem-minitest-5.14.2-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-test-unit" release="129.oe2203sp1" version="3.3.7">
                         <filename>rubygem-test-unit-3.3.7-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="ruby-help" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-help-3.0.3-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="ruby-irb" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-irb-3.0.3-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-bundler" release="129.oe2203sp1" version="2.2.32">
                         <filename>rubygem-bundler-2.2.32-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rexml" release="129.oe2203sp1" version="3.2.5">
                         <filename>rubygem-rexml-3.2.5-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rake" release="129.oe2203sp1" version="13.0.3">
                         <filename>rubygem-rake-13.0.3-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rss" release="129.oe2203sp1" version="0.2.9">
                         <filename>rubygem-rss-0.2.9-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-did_you_mean" release="129.oe2203sp1" version="1.5.0">
                         <filename>rubygem-did_you_mean-1.5.0-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygems-devel" release="129.oe2203sp1" version="3.2.32">
                         <filename>rubygems-devel-3.2.32-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-typeprof" release="129.oe2203sp1" version="0.15.2">
                         <filename>rubygem-typeprof-0.15.2-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rdoc" release="129.oe2203sp1" version="6.3.3">
                         <filename>rubygem-rdoc-6.3.3-129.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby-debugsource" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-debugsource-3.0.3-129.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-3.0.3-129.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-openssl" release="129.oe2203sp1" version="2.2.1">
                         <filename>rubygem-openssl-2.2.1-129.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-json" release="129.oe2203sp1" version="2.5.1">
                         <filename>rubygem-json-2.5.1-129.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby-devel" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-devel-3.0.3-129.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-io-console" release="129.oe2203sp1" version="0.5.7">
                         <filename>rubygem-io-console-0.5.7-129.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-bigdecimal" release="129.oe2203sp1" version="3.0.0">
                         <filename>rubygem-bigdecimal-3.0.0-129.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-psych" release="129.oe2203sp1" version="3.3.2">
                         <filename>rubygem-psych-3.3.2-129.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby-debuginfo" release="129.oe2203sp1" version="3.0.3">
                         <filename>ruby-debuginfo-3.0.3-129.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1227</id>
          <title>An update for python3 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-14"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24329" id="CVE-2023-24329" title="CVE-2023-24329" type="cve"></reference>
          </references>
          <description>An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.(CVE-2023-24329)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python3" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-3.9.9-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-devel" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-devel-3.9.9-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-debug" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-debug-3.9.9-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-debuginfo" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-debuginfo-3.9.9-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-unversioned-command" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-unversioned-command-3.9.9-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-debugsource" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-debugsource-3.9.9-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-help" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-help-3.9.9-24.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-devel" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-devel-3.9.9-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-3.9.9-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-debuginfo" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-debuginfo-3.9.9-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-unversioned-command" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-unversioned-command-3.9.9-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-debugsource" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-debugsource-3.9.9-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-debug" release="24.oe2203sp1" version="3.9.9">
                         <filename>python3-debug-3.9.9-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1233</id>
          <title>An update for samba is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0225" id="CVE-2023-0225" title="CVE-2023-0225" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0922" id="CVE-2023-0922" title="CVE-2023-0922" type="cve"></reference>
          </references>
          <description>A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.(CVE-2023-0225)The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.(CVE-2023-0922)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="samba-winbind" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-krb5-locator" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-krb5-locator-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ctdb" release="4.oe2203sp1" version="4.17.5">
                         <filename>ctdb-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-bind-dlz" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-bind-dlz-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-client-libs" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-client-libs-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libsmbclient-devel" release="4.oe2203sp1" version="4.17.5">
                         <filename>libsmbclient-devel-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-modules" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-modules-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba" release="4.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-krb5-printing" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-krb5-printing-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-debugsource" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-debugsource-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba-dc" release="4.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-dc-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwbclient" release="4.oe2203sp1" version="4.17.5">
                         <filename>libwbclient-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-common-tools" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-common-tools-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-clients" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-clients-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libsmbclient" release="4.oe2203sp1" version="4.17.5">
                         <filename>libsmbclient-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-test" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-test-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-libs" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-libs-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-libs" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-libs-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-client" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-client-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-debuginfo" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-debuginfo-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-provision" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-provision-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-common" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-common-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwbclient-devel" release="4.oe2203sp1" version="4.17.5">
                         <filename>libwbclient-devel-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-devel" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-devel-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-help" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-help-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba-test" release="4.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-test-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-usershares" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-usershares-4.17.5-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="samba-pidl" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-pidl-4.17.5-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-krb5-printing" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-krb5-printing-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-bind-dlz" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-bind-dlz-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-usershares" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-usershares-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libsmbclient" release="4.oe2203sp1" version="4.17.5">
                         <filename>libsmbclient-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba-test" release="4.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-test-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ctdb" release="4.oe2203sp1" version="4.17.5">
                         <filename>ctdb-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwbclient" release="4.oe2203sp1" version="4.17.5">
                         <filename>libwbclient-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-common" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-common-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-debugsource" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-debugsource-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-clients" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-clients-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-vfs-glusterfs" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-vfs-glusterfs-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-krb5-locator" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-krb5-locator-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-test" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-test-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba" release="4.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-libs" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-libs-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-modules" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-modules-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-provision" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-provision-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-client" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-client-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-help" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-help-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libsmbclient-devel" release="4.oe2203sp1" version="4.17.5">
                         <filename>libsmbclient-devel-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-devel" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-devel-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba-dc" release="4.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-dc-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-common-tools" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-common-tools-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-libs" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-libs-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-client-libs" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-client-libs-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-debuginfo" release="4.oe2203sp1" version="4.17.5">
                         <filename>samba-debuginfo-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwbclient-devel" release="4.oe2203sp1" version="4.17.5">
                         <filename>libwbclient-devel-4.17.5-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1234</id>
          <title>An update for openvswitch is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1668" id="CVE-2023-1668" title="CVE-2023-1668" type="cve"></reference>
          </references>
          <description>A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.(CVE-2023-1668)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="openvswitch-debuginfo" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-debuginfo-2.12.4-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openvswitch-help" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-help-2.12.4-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openvswitch-devel" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-devel-2.12.4-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openvswitch-debugsource" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-debugsource-2.12.4-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openvswitch" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-2.12.4-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch-help" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-help-2.12.4-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch-debuginfo" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-debuginfo-2.12.4-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch-debugsource" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-debugsource-2.12.4-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch-devel" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-devel-2.12.4-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openvswitch" release="3.oe2203sp1" version="2.12.4">
                         <filename>openvswitch-2.12.4-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1236</id>
          <title>An update for mod_auth_openidc is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-23527" id="CVE-2022-23527" title="CVE-2022-23527" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28625" id="CVE-2023-28625" title="CVE-2023-28625" type="cve"></reference>
          </references>
          <description>mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior to 2.4.12.2 are vulnerable to Open Redirect. When providing a logout parameter to the redirect URI, the existing code in oidc_validate_redirect_url() does not properly check for URLs that start with /\t, leading to an open redirect. This issue has been patched in version 2.4.12.2. Users unable to upgrade can mitigate the issue by configuring mod_auth_openidc to only allow redirection when the destination matches a given regular expression with OIDCRedirectURLsAllowed.(CVE-2022-23527)mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when `OIDCStripCookies` is set and a crafted cookie supplied, a NULL pointer dereference would occur, resulting in a segmentation fault. This could be used in a Denial-of-Service attack and thus presents an availability risk. Version 2.4.13.2 contains a patch for this issue. As a workaround, avoid using `OIDCStripCookies`.(CVE-2023-28625)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="mod_auth_openidc-debugsource" release="1.oe2203sp1" version="2.4.13.2">
                         <filename>mod_auth_openidc-debugsource-2.4.13.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mod_auth_openidc" release="1.oe2203sp1" version="2.4.13.2">
                         <filename>mod_auth_openidc-2.4.13.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mod_auth_openidc-debuginfo" release="1.oe2203sp1" version="2.4.13.2">
                         <filename>mod_auth_openidc-debuginfo-2.4.13.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mod_auth_openidc-debugsource" release="1.oe2203sp1" version="2.4.13.2">
                         <filename>mod_auth_openidc-debugsource-2.4.13.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mod_auth_openidc-debuginfo" release="1.oe2203sp1" version="2.4.13.2">
                         <filename>mod_auth_openidc-debuginfo-2.4.13.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mod_auth_openidc" release="1.oe2203sp1" version="2.4.13.2">
                         <filename>mod_auth_openidc-2.4.13.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1237</id>
          <title>An update for golang is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24536" id="CVE-2023-24536" title="CVE-2023-24536" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24534" id="CVE-2023-24534" title="CVE-2023-24534" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24538" id="CVE-2023-24538" title="CVE-2023-24538" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24537" id="CVE-2023-24537" title="CVE-2023-24537" type="cve"></reference>
          </references>
          <description>Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can undercount the amount of memory consumed, leading it to accept larger inputs than intended. 2. Limiting total memory does not account for increased pressure on the garbage collector from large numbers of small allocations in forms with many parts. 3. ReadForm can allocate a large number of short-lived buffers, further increasing pressure on the garbage collector. The combination of these factors can permit an attacker to cause an program that parses multipart forms to consume large amounts of CPU and memory, potentially resulting in a denial of service. This affects programs that use mime/multipart.Reader.ReadForm, as well as form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. With fix, ReadForm now does a better job of estimating the memory consumption of parsed forms, and performs many fewer short-lived allocations. In addition, the fixed mime/multipart.Reader imposes the following limits on the size of parsed forms: 1. Forms parsed with ReadForm may contain no more than 1000 parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxparts=. 2. Form parts parsed with NextPart and NextRawPart may contain no more than 10,000 header fields. In addition, forms parsed with ReadForm may contain no more than 10,000 header fields across all parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxheaders=.(CVE-2023-24536)HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more memory than required to hold the parsed headers. An attacker can exploit this behavior to cause an HTTP server to allocate large amounts of memory from a small request, potentially leading to memory exhaustion and a denial of service. With fix, header parsing now correctly allocates only the memory required to hold parsed headers.(CVE-2023-24534)Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g. &#34;var a = {{.}}&#34;), since there is no obviously safe way to allow this behavior. This takes the same approach as github.com/google/safehtml. With fix, Template.Parse returns an Error when it encounters templates like this, with an ErrorCode of value 12. This ErrorCode is currently unexported, but will be exported in the release of Go 1.21. Users who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the caveat that backticks will now be escaped. This should be used with caution.(CVE-2023-24538)Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.(CVE-2023-24537)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="golang" release="16.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-16.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-help" release="16.oe2203sp1" version="1.17.3">
                         <filename>golang-help-1.17.3-16.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-devel" release="16.oe2203sp1" version="1.17.3">
                         <filename>golang-devel-1.17.3-16.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="golang" release="16.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-16.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1238</id>
          <title>An update for docker is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28842" id="CVE-2023-28842" title="CVE-2023-28842" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28841" id="CVE-2023-28841" title="CVE-2023-28841" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28840" id="CVE-2023-28840" title="CVE-2023-28840" type="cve"></reference>
          </references>
          <description>Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*. Swarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code. The `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes. Encrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption. When setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet&#39;s VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN. The `overlay` driver dynamically and lazily defines the kernel configuration for the VXLAN network on each node as containers are attached and detached. Routes and encryption parameters are only defined for destination nodes that participate in the network. The iptables rules that prevent encrypted overlay networks from accepting unencrypted packets are not created until a peer is available with which to communicate. Encrypted overlay networks silently accept cleartext VXLAN datagrams that are tagged with the VNI of an encrypted overlay network. As a result, it is possible to inject arbitrary Ethernet frames into the encrypted overlay network by encapsulating them in VXLAN datagrams. The implications of this can be quite dire, and GHSA-vwm3-crmr-xfxw should be referenced for a deeper exploration. Patches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime&#39;s 20.10 releases are numbered differently, users of that platform should update to 20.10.16. Some workarounds are available. In multi-node clusters, deploy a global ‘pause’ container for each encrypted overlay network, on every node. For a single-node cluster, do not use overlay networks of any sort. Bridge networks provide the same connectivity on a single node and have no multi-node features. The Swarm ingress feature is implemented using an overlay network, but can be disabled by publishing ports in `host` mode instead of `ingress` mode (allowing the use of an external load balancer), and removing the `ingress` network. If encrypted overlay networks are in exclusive use, block UDP port 4789 from traffic that has not been validated by IPSec.(CVE-2023-28842)Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*. Swarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code. The `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes. Encrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption. When setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet&#39;s VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN. An iptables rule designates outgoing VXLAN datagrams with a VNI that corresponds to an encrypted overlay network for IPsec encapsulation. Encrypted overlay networks on affected platforms silently transmit unencrypted data. As a result, `overlay` networks may appear to be functional, passing traffic as expected, but without any of the expected confidentiality or data integrity guarantees. It is possible for an attacker sitting in a trusted position on the network to read all of the application traffic that is moving across the overlay network, resulting in unexpected secrets or user data disclosure. Thus, because many database protocols, internal APIs, etc. are not protected by a second layer of encryption, a user may use Swarm encrypted overlay networks to provide confidentiality, which due to this vulnerability this is no longer guaranteed. Patches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime&#39;s 20.10 releases are numbered differently, users of that platform should update to 20.10.16. Some workarounds are available. Close the VXLAN port (by default, UDP port 4789) to outgoing traffic at the Internet boundary in order to prevent unintentionally leaking unencrypted traffic over the Internet, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster.(CVE-2023-28841)Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly referred to as *Docker*. Swarm Mode, which is compiled in and delivered by default in dockerd and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code. The overlay network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes. Encrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption. When setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the u32 iptables extension provided by the xt_u32 kernel module to directly filter on a VXLAN packet&#39;s VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN. Two iptables rules serve to filter incoming VXLAN datagrams with a VNI that corresponds to an encrypted network and discards unencrypted datagrams. The rules are appended to the end of the INPUT filter chain, following any rules that have been previously set by the system administrator. Administrator-set rules take precedence over the rules Moby sets to discard unencrypted VXLAN datagrams, which can potentially admit unencrypted datagrams that should have been discarded. The injection of arbitrary Ethernet frames can enable a Denial of Service attack. A sophisticated attacker may be able to establish a UDP or TCP connection by way of the container’s outbound gateway that would otherwise be blocked by a stateful firewall, or carry out other escalations beyond simple injection by smuggling packets into the overlay network. Patches are available in Moby releases 23.0.3 and 20.10.24. As Mirantis Container Runtime&#39;s 20.10 releases are numbered differently, users of that platform should update to 20.10.16. Some workarounds are available. Close the VXLAN port (by default, UDP port 4789) to incoming traffic at the Internet boundary to prevent all VXLAN packet injection, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster.(CVE-2023-28840)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="docker-engine-debuginfo" release="323.oe2203sp1" version="18.09.0">
                         <filename>docker-engine-debuginfo-18.09.0-323.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="docker-engine" release="323.oe2203sp1" version="18.09.0">
                         <filename>docker-engine-18.09.0-323.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="docker-engine-debugsource" release="323.oe2203sp1" version="18.09.0">
                         <filename>docker-engine-debugsource-18.09.0-323.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="docker-engine-debugsource" release="323.oe2203sp1" version="18.09.0">
                         <filename>docker-engine-debugsource-18.09.0-323.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="docker-engine" release="323.oe2203sp1" version="18.09.0">
                         <filename>docker-engine-18.09.0-323.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="docker-engine-debuginfo" release="323.oe2203sp1" version="18.09.0">
                         <filename>docker-engine-debuginfo-18.09.0-323.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1239</id>
          <title>An update for xorg-x11-server is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1393" id="CVE-2023-1393" title="CVE-2023-1393" type="cve"></reference>
          </references>
          <description>A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.(CVE-2023-1393)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="xorg-x11-server-Xephyr" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xephyr-1.20.11-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-devel" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-devel-1.20.11-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-debugsource" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-debugsource-1.20.11-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-common" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-common-1.20.11-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-1.20.11-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-Xnest" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xnest-1.20.11-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-Xdmx" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xdmx-1.20.11-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-debuginfo" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-debuginfo-1.20.11-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="xorg-x11-server-Xvfb" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xvfb-1.20.11-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="xorg-x11-server-help" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-help-1.20.11-18.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="xorg-x11-server-source" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-source-1.20.11-18.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-Xephyr" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xephyr-1.20.11-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-Xvfb" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xvfb-1.20.11-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-debuginfo" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-debuginfo-1.20.11-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-devel" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-devel-1.20.11-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-Xdmx" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xdmx-1.20.11-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-Xnest" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-Xnest-1.20.11-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-1.20.11-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-common" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-common-1.20.11-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="xorg-x11-server-debugsource" release="18.oe2203sp1" version="1.20.11">
                         <filename>xorg-x11-server-debugsource-1.20.11-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1240</id>
          <title>An update for avahi is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1981" id="CVE-2023-1981" title="CVE-2023-1981" type="cve"></reference>
          </references>
          <description>It was discovered that the avahi deamon can be locally crashed by a dbus call made by an unprivileged user, causing a denial of service.References:https://github.com/lathiat/avahi/issues/375(CVE-2023-1981)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="avahi-gobject-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-gobject-devel-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-compat-howl-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-compat-howl-devel-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-ui" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-ui-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-gobject" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-gobject-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-glib-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-glib-devel-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-autoipd" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-autoipd-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-glib" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-glib-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-compat-libdns_sd-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-compat-libdns_sd-devel-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-dnsconfd" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-dnsconfd-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-compat-libdns_sd" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-compat-libdns_sd-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-libs" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-libs-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-devel-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-ui-gtk3" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-ui-gtk3-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-compat-howl" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-compat-howl-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-tools" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-tools-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-debugsource" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-debugsource-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-debuginfo" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-debuginfo-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="avahi-ui-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-ui-devel-0.8-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="avahi-help" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-help-0.8-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-compat-howl" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-compat-howl-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-libs" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-libs-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-compat-howl-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-compat-howl-devel-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-gobject" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-gobject-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-glib-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-glib-devel-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-compat-libdns_sd" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-compat-libdns_sd-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-ui-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-ui-devel-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-autoipd" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-autoipd-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-ui" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-ui-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-dnsconfd" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-dnsconfd-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-compat-libdns_sd-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-compat-libdns_sd-devel-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-devel-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-debugsource" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-debugsource-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-glib" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-glib-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-ui-gtk3" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-ui-gtk3-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-gobject-devel" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-gobject-devel-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-tools" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-tools-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="avahi-debuginfo" release="15.oe2203sp1" version="0.8">
                         <filename>avahi-debuginfo-0.8-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1242</id>
          <title>An update for lua is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-45985" id="CVE-2021-45985" title="CVE-2021-45985" type="cve"></reference>
          </references>
          <description>In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.(CVE-2021-45985)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="lua-debugsource" release="11.oe2203sp1" version="5.4.3">
                         <filename>lua-debugsource-5.4.3-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="lua-debuginfo" release="11.oe2203sp1" version="5.4.3">
                         <filename>lua-debuginfo-5.4.3-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="lua" release="11.oe2203sp1" version="5.4.3">
                         <filename>lua-5.4.3-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="lua-devel" release="11.oe2203sp1" version="5.4.3">
                         <filename>lua-devel-5.4.3-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="lua-help" release="11.oe2203sp1" version="5.4.3">
                         <filename>lua-help-5.4.3-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="lua-debuginfo" release="11.oe2203sp1" version="5.4.3">
                         <filename>lua-debuginfo-5.4.3-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="lua-debugsource" release="11.oe2203sp1" version="5.4.3">
                         <filename>lua-debugsource-5.4.3-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="lua" release="11.oe2203sp1" version="5.4.3">
                         <filename>lua-5.4.3-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="lua-devel" release="11.oe2203sp1" version="5.4.3">
                         <filename>lua-devel-5.4.3-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1244</id>
          <title>An update for tcpdump is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1801" id="CVE-2023-1801" title="CVE-2023-1801" type="cve"></reference>
          </references>
          <description>The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.(CVE-2023-1801)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="tcpdump-help" release="6.oe2203sp1" version="4.99.1">
                         <filename>tcpdump-help-4.99.1-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="tcpdump" release="6.oe2203sp1" version="4.99.1">
                         <filename>tcpdump-4.99.1-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="tcpdump-debuginfo" release="6.oe2203sp1" version="4.99.1">
                         <filename>tcpdump-debuginfo-4.99.1-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="tcpdump-debugsource" release="6.oe2203sp1" version="4.99.1">
                         <filename>tcpdump-debugsource-4.99.1-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="tcpdump" release="6.oe2203sp1" version="4.99.1">
                         <filename>tcpdump-4.99.1-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="tcpdump-debugsource" release="6.oe2203sp1" version="4.99.1">
                         <filename>tcpdump-debugsource-4.99.1-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="tcpdump-debuginfo" release="6.oe2203sp1" version="4.99.1">
                         <filename>tcpdump-debuginfo-4.99.1-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="tcpdump-help" release="6.oe2203sp1" version="4.99.1">
                         <filename>tcpdump-help-4.99.1-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1245</id>
          <title>An update for nasm is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-44370" id="CVE-2022-44370" title="CVE-2022-44370" type="cve"></reference>
          </references>
          <description>NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856(CVE-2022-44370)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="nasm-debuginfo" release="5.oe2203sp1" version="2.15.05">
                         <filename>nasm-debuginfo-2.15.05-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="nasm-debugsource" release="5.oe2203sp1" version="2.15.05">
                         <filename>nasm-debugsource-2.15.05-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="nasm" release="5.oe2203sp1" version="2.15.05">
                         <filename>nasm-2.15.05-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="nasm-help" release="5.oe2203sp1" version="2.15.05">
                         <filename>nasm-help-2.15.05-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="nasm-debuginfo" release="5.oe2203sp1" version="2.15.05">
                         <filename>nasm-debuginfo-2.15.05-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="nasm-debugsource" release="5.oe2203sp1" version="2.15.05">
                         <filename>nasm-debugsource-2.15.05-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="nasm" release="5.oe2203sp1" version="2.15.05">
                         <filename>nasm-2.15.05-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1246</id>
          <title>An update for freetype is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2004" id="CVE-2023-2004" title="CVE-2023-2004" type="cve"></reference>
          </references>
          <description>An integer overflow vulnerability was discovered in Freetype in tt_hvadvance_adjust() function in src/truetype/ttgxvar.c.(CVE-2023-2004)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="freetype-demos" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-demos-2.12.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freetype-debugsource" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-debugsource-2.12.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freetype" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-2.12.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freetype-devel" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-devel-2.12.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="freetype-debuginfo" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-debuginfo-2.12.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="freetype-help" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-help-2.12.1-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freetype-debugsource" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-debugsource-2.12.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freetype-demos" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-demos-2.12.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freetype-devel" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-devel-2.12.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freetype-debuginfo" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-debuginfo-2.12.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="freetype" release="2.oe2203sp1" version="2.12.1">
                         <filename>freetype-2.12.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1247</id>
          <title>An update for tomcat is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28708" id="CVE-2023-28708" title="CVE-2023-28708" type="cve"></reference>
          </references>
          <description>When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel.(CVE-2023-28708)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="noarch" name="tomcat-jsvc" release="30.oe2203sp1" version="9.0.10">
                         <filename>tomcat-jsvc-9.0.10-30.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="tomcat" release="30.oe2203sp1" version="9.0.10">
                         <filename>tomcat-9.0.10-30.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="tomcat-help" release="30.oe2203sp1" version="9.0.10">
                         <filename>tomcat-help-9.0.10-30.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1249</id>
          <title>An update for bluez is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-27349" id="CVE-2023-27349" title="CVE-2023-27349" type="cve"></reference>
          </references>
          <description>(CVE-2023-27349)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="bluez-debugsource" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-debugsource-5.54-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bluez-cups" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-cups-5.54-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bluez-debuginfo" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-debuginfo-5.54-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bluez" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-5.54-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bluez-devel" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-devel-5.54-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bluez-libs" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-libs-5.54-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="bluez-help" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-help-5.54-17.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bluez-debuginfo" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-debuginfo-5.54-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bluez-devel" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-devel-5.54-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bluez" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-5.54-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bluez-debugsource" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-debugsource-5.54-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bluez-libs" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-libs-5.54-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bluez-cups" release="17.oe2203sp1" version="5.54">
                         <filename>bluez-cups-5.54-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1250</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-1015" id="CVE-2022-1015" title="CVE-2022-1015" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-36280" id="CVE-2022-36280" title="CVE-2022-36280" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-27672" id="CVE-2022-27672" title="CVE-2022-27672" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-30456" id="CVE-2023-30456" title="CVE-2023-30456" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1989" id="CVE-2023-1989" title="CVE-2023-1989" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1829" id="CVE-2023-1829" title="CVE-2023-1829" type="cve"></reference>
          </references>
          <description>A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.(CVE-2022-1015)An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file &#39;/dev/dri/renderD128 (or Dxxx)&#39;. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).(CVE-2022-36280)When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.(CVE-2022-27672)An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.(CVE-2023-30456)A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.(CVE-2023-1989)A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.(CVE-2023-1829)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-tools" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.29.0.105.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.29.0.105.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.29.0.105.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1254</id>
          <title>An update for hyperscan is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-04-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-29486" id="CVE-2022-29486" title="CVE-2022-29486" type="cve"></reference>
          </references>
          <description>Improper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 may allow an unauthenticated user to potentially enable escalation of privilege via network access.(CVE-2022-29486)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="hyperscan-devel" release="3.oe2203sp1" version="5.4.0">
                         <filename>hyperscan-devel-5.4.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hyperscan-debugsource" release="3.oe2203sp1" version="5.4.0">
                         <filename>hyperscan-debugsource-5.4.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hyperscan-debuginfo" release="3.oe2203sp1" version="5.4.0">
                         <filename>hyperscan-debuginfo-5.4.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hyperscan" release="3.oe2203sp1" version="5.4.0">
                         <filename>hyperscan-5.4.0-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hyperscan-debuginfo" release="3.oe2203sp1" version="5.4.0">
                         <filename>hyperscan-debuginfo-5.4.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hyperscan-debugsource" release="3.oe2203sp1" version="5.4.0">
                         <filename>hyperscan-debugsource-5.4.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hyperscan" release="3.oe2203sp1" version="5.4.0">
                         <filename>hyperscan-5.4.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hyperscan-devel" release="3.oe2203sp1" version="5.4.0">
                         <filename>hyperscan-devel-5.4.0-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1257</id>
          <title>An update for haproxy is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-04-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25950" id="CVE-2023-25950" title="CVE-2023-25950" type="cve"></reference>
          </references>
          <description>HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user&#39;s request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.(CVE-2023-25950)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="haproxy" release="3.oe2203sp1" version="2.6.6">
                         <filename>haproxy-2.6.6-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="haproxy-debugsource" release="3.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debugsource-2.6.6-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="haproxy-debuginfo" release="3.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debuginfo-2.6.6-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="haproxy-help" release="3.oe2203sp1" version="2.6.6">
                         <filename>haproxy-help-2.6.6-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="haproxy-debuginfo" release="3.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debuginfo-2.6.6-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="haproxy-debugsource" release="3.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debugsource-2.6.6-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="haproxy" release="3.oe2203sp1" version="2.6.6">
                         <filename>haproxy-2.6.6-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1258</id>
          <title>An update for shadow is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Low</severity>
          <release>openEuler</release>
          <issued date="2023-04-28"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-29383" id="CVE-2023-29383" title="CVE-2023-29383" type="cve"></reference>
          </references>
          <description>In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that &#34;cat /etc/passwd&#34; shows a rogue user account.(CVE-2023-29383)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="shadow-debuginfo" release="9.oe2203sp1" version="4.9">
                         <filename>shadow-debuginfo-4.9-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="shadow-subid-devel" release="9.oe2203sp1" version="4.9">
                         <filename>shadow-subid-devel-4.9-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="shadow-debugsource" release="9.oe2203sp1" version="4.9">
                         <filename>shadow-debugsource-4.9-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="shadow" release="9.oe2203sp1" version="4.9">
                         <filename>shadow-4.9-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="noarch" name="shadow-help" release="9.oe2203sp1" version="4.9">
                         <filename>shadow-help-4.9-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="shadow" release="9.oe2203sp1" version="4.9">
                         <filename>shadow-4.9-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="shadow-debugsource" release="9.oe2203sp1" version="4.9">
                         <filename>shadow-debugsource-4.9-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="shadow-debuginfo" release="9.oe2203sp1" version="4.9">
                         <filename>shadow-debuginfo-4.9-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="shadow-subid-devel" release="9.oe2203sp1" version="4.9">
                         <filename>shadow-subid-devel-4.9-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1259</id>
          <title>An update for ImageMagick is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-28"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1289" id="CVE-2023-1289" title="CVE-2023-1289" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1906" id="CVE-2023-1906" title="CVE-2023-1906" type="cve"></reference>
          </references>
          <description>A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in &#34;/tmp,&#34; resulting in a denial of service. When ImageMagick crashes, it generates a lot of trash files. These trash files can be large if the SVG file contains many render actions. In a denial of service attack, if a remote attacker uploads an SVG file of size t, ImageMagick generates files of size 103*t. If an attacker uploads a 100M SVG, the server will generate about 10G.(CVE-2023-1289)A heap-based buffer overflow issue was discovered in ImageMagick&#39;s ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.(CVE-2023-1906)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="ImageMagick-perl" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debugsource" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debuginfo" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-devel" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-help" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++-devel" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++-devel" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-help" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debugsource" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-perl" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-devel" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debuginfo" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1261</id>
          <title>An update for wireshark is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-28"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1993" id="CVE-2023-1993" title="CVE-2023-1993" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1992" id="CVE-2023-1992" title="CVE-2023-1992" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1994" id="CVE-2023-1994" title="CVE-2023-1994" type="cve"></reference>
          </references>
          <description>LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1993)RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1992)GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1994)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="wireshark-debuginfo" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-help" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-devel" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debugsource" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-devel" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-help" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debugsource" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debuginfo" release="3.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1262</id>
          <title>An update for libxml2 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-28"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28484" id="CVE-2023-28484" title="CVE-2023-28484" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-29469" id="CVE-2023-29469" title="CVE-2023-29469" type="cve"></reference>
          </references>
          <description>In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.(CVE-2023-28484)An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the &#39;\0&#39; value).(CVE-2023-29469)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libxml2-debuginfo" release="5.oe2203sp1" version="2.9.14">
                         <filename>libxml2-debuginfo-2.9.14-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libxml2-devel" release="5.oe2203sp1" version="2.9.14">
                         <filename>libxml2-devel-2.9.14-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-libxml2" release="5.oe2203sp1" version="2.9.14">
                         <filename>python3-libxml2-2.9.14-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libxml2-debugsource" release="5.oe2203sp1" version="2.9.14">
                         <filename>libxml2-debugsource-2.9.14-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libxml2" release="5.oe2203sp1" version="2.9.14">
                         <filename>libxml2-2.9.14-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libxml2-help" release="5.oe2203sp1" version="2.9.14">
                         <filename>libxml2-help-2.9.14-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libxml2-devel" release="5.oe2203sp1" version="2.9.14">
                         <filename>libxml2-devel-2.9.14-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-libxml2" release="5.oe2203sp1" version="2.9.14">
                         <filename>python3-libxml2-2.9.14-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libxml2-debugsource" release="5.oe2203sp1" version="2.9.14">
                         <filename>libxml2-debugsource-2.9.14-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libxml2-debuginfo" release="5.oe2203sp1" version="2.9.14">
                         <filename>libxml2-debuginfo-2.9.14-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libxml2" release="5.oe2203sp1" version="2.9.14">
                         <filename>libxml2-2.9.14-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1263</id>
          <title>An update for screen is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-28"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24626" id="CVE-2023-24626" title="CVE-2023-24626" type="cve"></reference>
          </references>
          <description>socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.(CVE-2023-24626)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="screen" release="2.oe2203sp1" version="4.9.0">
                         <filename>screen-4.9.0-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="screen-debugsource" release="2.oe2203sp1" version="4.9.0">
                         <filename>screen-debugsource-4.9.0-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="screen-debuginfo" release="2.oe2203sp1" version="4.9.0">
                         <filename>screen-debuginfo-4.9.0-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="screen-help" release="2.oe2203sp1" version="4.9.0">
                         <filename>screen-help-4.9.0-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="screen-debuginfo" release="2.oe2203sp1" version="4.9.0">
                         <filename>screen-debuginfo-4.9.0-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="screen-debugsource" release="2.oe2203sp1" version="4.9.0">
                         <filename>screen-debugsource-4.9.0-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="screen" release="2.oe2203sp1" version="4.9.0">
                         <filename>screen-4.9.0-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1264</id>
          <title>An update for dmidecode is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-04-28"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-30630" id="CVE-2023-30630" title="CVE-2023-30630" type="cve"></reference>
          </references>
          <description>Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.(CVE-2023-30630)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="dmidecode-debugsource" release="3.oe2203sp1" version="3.4">
                         <filename>dmidecode-debugsource-3.4-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="dmidecode" release="3.oe2203sp1" version="3.4">
                         <filename>dmidecode-3.4-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="dmidecode-debuginfo" release="3.oe2203sp1" version="3.4">
                         <filename>dmidecode-debuginfo-3.4-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dmidecode-debuginfo" release="3.oe2203sp1" version="3.4">
                         <filename>dmidecode-debuginfo-3.4-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dmidecode-debugsource" release="3.oe2203sp1" version="3.4">
                         <filename>dmidecode-debugsource-3.4-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dmidecode" release="3.oe2203sp1" version="3.4">
                         <filename>dmidecode-3.4-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1265</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-04-28"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1855" id="CVE-2023-1855" title="CVE-2023-1855" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1990" id="CVE-2023-1990" title="CVE-2023-1990" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1872" id="CVE-2023-1872" title="CVE-2023-1872" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2006" id="CVE-2023-2006" title="CVE-2023-2006" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-30772" id="CVE-2023-30772" title="CVE-2023-30772" type="cve"></reference>
          </references>
          <description>A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.(CVE-2023-1855)A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.(CVE-2023-1990)A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.The io_file_get_fixed function lacks the presence of ctx-&gt;uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.(CVE-2023-1872)A race condition was found in the Linux kernel&#39;s RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.(CVE-2023-2006)The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.(CVE-2023-30772)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.30.0.106.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.30.0.106.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.30.0.106.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1269</id>
          <title>An update for git is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25652" id="CVE-2023-25652" title="CVE-2023-25652" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25815" id="CVE-2023-25815" title="CVE-2023-25815" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-29007" id="CVE-2023-29007" title="CVE-2023-29007" type="cve"></reference>
          </references>
          <description>Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file exists.(CVE-2023-25652)In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the `gettext()` function&#39;s implicit initialization no longer uses the runtime prefix but uses the hard-coded path `C:\mingw64\share\locale` to look for localized messages. And since any authenticated user has the permission to create folders in `C:\` (and since `C:\mingw64` does not typically exist), it is possible for low-privilege users to place fake messages in that location where `git.exe` will pick them up in version 2.40.1.This vulnerability is relatively hard to exploit and requires social engineering. For example, a legitimate message at the end of a clone could be maliciously modified to ask the user to direct their web browser to a malicious website, and the user might think that the message comes from Git and is legitimate. It does require local write access by the attacker, though, which makes this attack vector less likely. Version 2.40.1 contains a patch for this issue. Some workarounds are available. Do not work on a Windows machine with shared accounts, or alternatively create a `C:\mingw64` folder and leave it empty. Users who have administrative rights may remove the permission to create folders in `C:\`.(CVE-2023-25815)Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user&#39;s `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`.(CVE-2023-29007)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="git" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-2.33.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-daemon" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-daemon-2.33.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-debuginfo" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-debuginfo-2.33.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-debugsource" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-debugsource-2.33.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="git-core" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-core-2.33.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-svn" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-svn-2.33.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="perl-Git" release="11.oe2203sp1" version="2.33.0">
                         <filename>perl-Git-2.33.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-web" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-web-2.33.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="perl-Git-SVN" release="11.oe2203sp1" version="2.33.0">
                         <filename>perl-Git-SVN-2.33.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-email" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-email-2.33.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-help" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-help-2.33.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="git-gui" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-gui-2.33.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="gitk" release="11.oe2203sp1" version="2.33.0">
                         <filename>gitk-2.33.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-debuginfo" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-debuginfo-2.33.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-daemon" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-daemon-2.33.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-core" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-core-2.33.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-2.33.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="git-debugsource" release="11.oe2203sp1" version="2.33.0">
                         <filename>git-debugsource-2.33.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1275</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4382" id="CVE-2022-4382" title="CVE-2022-4382" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1998" id="CVE-2023-1998" title="CVE-2023-1998" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2007" id="CVE-2023-2007" title="CVE-2023-2007" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2166" id="CVE-2023-2166" title="CVE-2023-2166" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2176" id="CVE-2023-2176" title="CVE-2023-2176" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2194" id="CVE-2023-2194" title="CVE-2023-2194" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2269" id="CVE-2023-2269" title="CVE-2023-2269" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0458" id="CVE-2023-0458" title="CVE-2023-0458" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-31436" id="CVE-2023-31436" title="CVE-2023-31436" type="cve"></reference>
          </references>
          <description>A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.(CVE-2022-4382)The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The same behavior can be observed on a bare-metal machine when forcing the mitigation to IBRS on boot command line.This happened because when plain IBRS was enabled (not enhanced IBRS), the kernel had some logic that determined that STIBP was not needed. The IBRS bit implicitly protects against cross-thread branch target injection. However, with legacy IBRS, the IBRS bit was cleared on returning to userspace, due to performance reasons, which disabled the implicit STIBP and left userspace threads vulnerable to cross-thread branch target injection against which STIBP protects.(CVE-2023-1998)The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.(CVE-2023-2007)A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.(CVE-2023-2166)A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege.(CVE-2023-2176)An out-of-bounds write vulnerability was found in the Linux kernel&#39;s SLIMpro I2C device driver. The userspace &#34;data-&gt;block[0]&#34; variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution.(CVE-2023-2194)A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.(CVE-2023-2269)A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the &#39;rlim&#39; variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11(CVE-2023-0458)qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.(CVE-2023-31436)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.31.0.107.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="504" arch="x86_64" name="python3-perf-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.31.0.107.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.31.0.107.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1278</id>
          <title>An update for vim is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-05-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2426" id="CVE-2023-2426" title="CVE-2023-2426" type="cve"></reference>
          </references>
          <description>Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.(CVE-2023-2426)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="vim-debuginfo" release="14.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-minimal" release="14.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-enhanced" release="14.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-common" release="14.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-X11" release="14.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debugsource" release="14.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="noarch" name="vim-filesystem" release="14.oe2203sp1" version="9.0">
                         <filename>vim-filesystem-9.0-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-X11" release="14.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-common" release="14.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-enhanced" release="14.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debuginfo" release="14.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debugsource" release="14.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-minimal" release="14.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1279</id>
          <title>An update for python-sqlparse is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-30608" id="CVE-2023-30608" title="CVE-2023-30608" type="cve"></reference>
          </references>
          <description>sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.(CVE-2023-30608)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python-sqlparse-help" release="2.oe2203sp1" version="0.4.2">
                         <filename>python-sqlparse-help-0.4.2-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-sqlparse" release="2.oe2203sp1" version="0.4.2">
                         <filename>python3-sqlparse-0.4.2-2.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1280</id>
          <title>An update for LibRaw is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Low</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1729" id="CVE-2023-1729" title="CVE-2023-1729" type="cve"></reference>
          </references>
          <description>A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.(CVE-2023-1729)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="LibRaw" release="6.oe2203sp1" version="0.20.2">
                         <filename>LibRaw-0.20.2-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="LibRaw-debuginfo" release="6.oe2203sp1" version="0.20.2">
                         <filename>LibRaw-debuginfo-0.20.2-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="LibRaw-devel" release="6.oe2203sp1" version="0.20.2">
                         <filename>LibRaw-devel-0.20.2-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="LibRaw-debugsource" release="6.oe2203sp1" version="0.20.2">
                         <filename>LibRaw-debugsource-0.20.2-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="LibRaw-debuginfo" release="6.oe2203sp1" version="0.20.2">
                         <filename>LibRaw-debuginfo-0.20.2-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="LibRaw-devel" release="6.oe2203sp1" version="0.20.2">
                         <filename>LibRaw-devel-0.20.2-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="LibRaw-debugsource" release="6.oe2203sp1" version="0.20.2">
                         <filename>LibRaw-debugsource-0.20.2-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="LibRaw" release="6.oe2203sp1" version="0.20.2">
                         <filename>LibRaw-0.20.2-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1281</id>
          <title>An update for vim is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2609" id="CVE-2023-2609" title="CVE-2023-2609" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2610" id="CVE-2023-2610" title="CVE-2023-2610" type="cve"></reference>
          </references>
          <description>NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.(CVE-2023-2609)Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.(CVE-2023-2610)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="2" arch="aarch64" name="vim-debuginfo" release="15.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-debugsource" release="15.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-enhanced" release="15.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-common" release="15.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-X11" release="15.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="aarch64" name="vim-minimal" release="15.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-15.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="2" arch="noarch" name="vim-filesystem" release="15.oe2203sp1" version="9.0">
                         <filename>vim-filesystem-9.0-15.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debugsource" release="15.oe2203sp1" version="9.0">
                         <filename>vim-debugsource-9.0-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-minimal" release="15.oe2203sp1" version="9.0">
                         <filename>vim-minimal-9.0-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-enhanced" release="15.oe2203sp1" version="9.0">
                         <filename>vim-enhanced-9.0-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-common" release="15.oe2203sp1" version="9.0">
                         <filename>vim-common-9.0-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-X11" release="15.oe2203sp1" version="9.0">
                         <filename>vim-X11-9.0-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="2" arch="x86_64" name="vim-debuginfo" release="15.oe2203sp1" version="9.0">
                         <filename>vim-debuginfo-9.0-15.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1282</id>
          <title>An update for ntp is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26551" id="CVE-2023-26551" title="CVE-2023-26551" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26554" id="CVE-2023-26554" title="CVE-2023-26554" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26553" id="CVE-2023-26553" title="CVE-2023-26553" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26552" id="CVE-2023-26552" title="CVE-2023-26552" type="cve"></reference>
          </references>
          <description>mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp&lt;cpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.(CVE-2023-26551)mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a &#39;\0&#39; character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.(CVE-2023-26554)mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.(CVE-2023-26553)mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.(CVE-2023-26552)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="ntp-debugsource" release="9.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-debugsource-4.2.8p15-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ntp" release="9.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-4.2.8p15-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ntp-debuginfo" release="9.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-debuginfo-4.2.8p15-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="ntp-help" release="9.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-help-4.2.8p15-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="ntp-perl" release="9.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-perl-4.2.8p15-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ntp-debuginfo" release="9.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-debuginfo-4.2.8p15-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ntp" release="9.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-4.2.8p15-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ntp-debugsource" release="9.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-debugsource-4.2.8p15-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1283</id>
          <title>An update for openjdk-11 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-21930" id="CVE-2023-21930" title="CVE-2023-21930" type="cve"></reference>
          </references>
          <description>Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2023-21930)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-debugsource" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-debugsource-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-jmods" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-jmods-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-javadoc" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-javadoc-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-jmods-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-jmods-slowdebug-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-javadoc-zip" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-javadoc-zip-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-devel" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-devel-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-slowdebug-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-demo" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-demo-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-headless" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-headless-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-headless-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-headless-slowdebug-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-src-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-src-slowdebug-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-devel-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-devel-slowdebug-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-debuginfo" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-debuginfo-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-demo-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-demo-slowdebug-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-11-openjdk-src" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-src-11.0.19.7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-src-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-src-slowdebug-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-devel-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-devel-slowdebug-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-debuginfo" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-debuginfo-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-headless-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-headless-slowdebug-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-javadoc" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-javadoc-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-slowdebug-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-demo" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-demo-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-devel" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-devel-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-debugsource" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-debugsource-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-jmods-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-jmods-slowdebug-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-javadoc-zip" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-javadoc-zip-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-headless" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-headless-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-jmods" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-jmods-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-demo-slowdebug" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-demo-slowdebug-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-11-openjdk-src" release="3.oe2203sp1" version="11.0.19.7">
                         <filename>java-11-openjdk-src-11.0.19.7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1284</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2002" id="CVE-2023-2002" title="CVE-2023-2002" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0458" id="CVE-2023-0458" title="CVE-2023-0458" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2483" id="CVE-2023-2483" title="CVE-2023-2483" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32269" id="CVE-2023-32269" title="CVE-2023-32269" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26544" id="CVE-2023-26544" title="CVE-2023-26544" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0459" id="CVE-2023-0459" title="CVE-2023-0459" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2177" id="CVE-2023-2177" title="CVE-2023-2177" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2513" id="CVE-2023-2513" title="CVE-2023-2513" type="cve"></reference>
          </references>
          <description>A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.(CVE-2023-2002)A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the &#39;rlim&#39; variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11(CVE-2023-0458)In emac_probe, &amp;adpt-&gt;work_thread is bound with emac_work_thread. Then it will be started by timeout handler emac_tx_timeout or a IRQ handler emac_isr. If we remove the driver which will call emac_remove to make cleanup, there may be a unfinished work. This could lead to a use-after-free.Upstream fix:https://github.com/torvalds/linux/commit/6b6bc5b8bd2d(CVE-2023-2483)An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.(CVE-2023-32269)In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size.(CVE-2023-26544)No description is available for this CVE(CVE-2023-0459)A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.(CVE-2023-2177)A use-after-free vulnerability was found in the Linux kernel&#39;s ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors.(CVE-2023-2513)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.32.0.108.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.32.0.108.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.32.0.108.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1285</id>
          <title>An update for mysql is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-37434" id="CVE-2022-37434" title="CVE-2022-37434" type="cve"></reference>
          </references>
          <description>zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).(CVE-2022-37434)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="mysql-test" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-test-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql-help" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-help-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql-server" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-server-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql-debugsource" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-debugsource-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql-devel" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-devel-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql-debuginfo" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-debuginfo-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql-config" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-config-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql-common" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-common-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql-libs" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-libs-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="mysql-errmsg" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-errmsg-8.0.29-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-config" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-config-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-devel" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-devel-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-server" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-server-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-help" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-help-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-libs" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-libs-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-common" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-common-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-test" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-test-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-errmsg" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-errmsg-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-debugsource" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-debugsource-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="mysql-debuginfo" release="2.oe2203sp1" version="8.0.29">
                         <filename>mysql-debuginfo-8.0.29-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1286</id>
          <title>An update for python-django is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-31047" id="CVE-2023-31047" title="CVE-2023-31047" type="cve"></reference>
          </references>
          <description>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.(CVE-2023-31047)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python3-Django" release="4.oe2203sp1" version="3.2.12">
                         <filename>python3-Django-3.2.12-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python-django-help" release="4.oe2203sp1" version="3.2.12">
                         <filename>python-django-help-3.2.12-4.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1287</id>
          <title>An update for perl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-31484" id="CVE-2023-31484" title="CVE-2023-31484" type="cve"></reference>
          </references>
          <description>CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.(CVE-2023-31484)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="4" arch="aarch64" name="perl-debugsource" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-debugsource-5.34.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="aarch64" name="perl-libs" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-libs-5.34.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="aarch64" name="perl-devel" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-devel-5.34.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="aarch64" name="perl-debuginfo" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-debuginfo-5.34.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="aarch64" name="perl" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-5.34.0-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="noarch" name="perl-help" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-help-5.34.0-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl-libs" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-libs-5.34.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl-debugsource" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-debugsource-5.34.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-5.34.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl-debuginfo" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-debuginfo-5.34.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl-devel" release="7.oe2203sp1" version="5.34.0">
                         <filename>perl-devel-5.34.0-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1288</id>
          <title>An update for openjdk-1.8.0 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-21967" id="CVE-2023-21967" title="CVE-2023-21967" type="cve"></reference>
          </references>
          <description>Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2023-21967)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-openjfx" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-openjfx-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-devel" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-devel-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-openjfx-devel" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-openjfx-devel-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-accessibility-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-slowdebug-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-demo" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-demo-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-debugsource" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-debugsource-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-openjfx-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-headless-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-devel-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-accessibility" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-accessibility-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-src-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-demo-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-headless" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-headless-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-src" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-src-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-debuginfo" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-debuginfo-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.372.b07-0.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="java-1.8.0-openjdk-javadoc-zip" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.372.b07-0.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="java-1.8.0-openjdk-javadoc" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-javadoc-1.8.0.372.b07-0.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-headless-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-devel" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-devel-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-src" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-src-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-headless" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-headless-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-openjfx-devel" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-openjfx-devel-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-debugsource" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-debugsource-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-accessibility-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-openjfx" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-openjfx-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-demo-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-demo" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-demo-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-openjfx-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-src-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-accessibility" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-accessibility-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-debuginfo" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-debuginfo-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-slowdebug-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk-devel-slowdebug" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="java-1.8.0-openjdk" release="0.oe2203sp1" version="1.8.0.372.b07">
                         <filename>java-1.8.0-openjdk-1.8.0.372.b07-0.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1289</id>
          <title>An update for redis is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28856" id="CVE-2023-28856" title="CVE-2023-28856" type="cve"></reference>
          </references>
          <description>Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to upgrade. There are no known workarounds for this issue.(CVE-2023-28856)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="redis-debuginfo" release="5.oe2203sp1" version="4.0.14">
                         <filename>redis-debuginfo-4.0.14-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="redis" release="5.oe2203sp1" version="4.0.14">
                         <filename>redis-4.0.14-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="redis-debugsource" release="5.oe2203sp1" version="4.0.14">
                         <filename>redis-debugsource-4.0.14-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="redis-debugsource" release="5.oe2203sp1" version="4.0.14">
                         <filename>redis-debugsource-4.0.14-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="redis-debuginfo" release="5.oe2203sp1" version="4.0.14">
                         <filename>redis-debuginfo-4.0.14-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="redis" release="5.oe2203sp1" version="4.0.14">
                         <filename>redis-4.0.14-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1290</id>
          <title>An update for cloud-init is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-05-19"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-2084" id="CVE-2022-2084" title="CVE-2022-2084" type="cve"></reference>
          </references>
          <description>Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.(CVE-2022-2084)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="cloud-init-help" release="14.oe2203sp1" version="21.4">
                         <filename>cloud-init-help-21.4-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="cloud-init" release="14.oe2203sp1" version="21.4">
                         <filename>cloud-init-21.4-14.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1292</id>
          <title>An update for ntp is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-05-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26555" id="CVE-2023-26555" title="CVE-2023-26555" type="cve"></reference>
          </references>
          <description>praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.(CVE-2023-26555)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="ntp-debugsource" release="10.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-debugsource-4.2.8p15-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ntp-debuginfo" release="10.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-debuginfo-4.2.8p15-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ntp" release="10.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-4.2.8p15-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="ntp-perl" release="10.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-perl-4.2.8p15-10.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="ntp-help" release="10.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-help-4.2.8p15-10.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ntp-debuginfo" release="10.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-debuginfo-4.2.8p15-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ntp" release="10.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-4.2.8p15-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ntp-debugsource" release="10.oe2203sp1" version="4.2.8p15">
                         <filename>ntp-debugsource-4.2.8p15-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1293</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2162" id="CVE-2023-2162" title="CVE-2023-2162" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2124" id="CVE-2023-2124" title="CVE-2023-2124" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32233" id="CVE-2023-32233" title="CVE-2023-32233" type="cve"></reference>
          </references>
          <description>A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.(CVE-2023-2162)An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system(CVE-2023-2124)In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.(CVE-2023-32233)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-devel" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.33.0.109.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.33.0.109.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.33.0.109.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1294</id>
          <title>An update for golang is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-29400" id="CVE-2023-29400" title="CVE-2023-29400" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24539" id="CVE-2023-24539" title="CVE-2023-24539" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24540" id="CVE-2023-24540" title="CVE-2023-24540" type="cve"></reference>
          </references>
          <description>Templates containing actions in unquoted HTML attributes (e.g. &#34;attr={{.}}&#34;) executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.(CVE-2023-29400)Angle brackets (&lt;&gt;) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a &#39;/&#39; character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.(CVE-2023-24539)Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set &#34;\t\n\f\r\u0020\u2028\u2029&#34; in JavaScript contexts that also contain actions may not be properly sanitized during execution.(CVE-2023-24540)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="golang" release="18.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-18.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-devel" release="18.oe2203sp1" version="1.17.3">
                         <filename>golang-devel-1.17.3-18.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-help" release="18.oe2203sp1" version="1.17.3">
                         <filename>golang-help-1.17.3-18.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="golang" release="18.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-18.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1297</id>
          <title>An update for cloud-init is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-05-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1786" id="CVE-2023-1786" title="CVE-2023-1786" type="cve"></reference>
          </references>
          <description>Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.(CVE-2023-1786)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="cloud-init" release="16.oe2203sp1" version="21.4">
                         <filename>cloud-init-21.4-16.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="cloud-init-help" release="16.oe2203sp1" version="21.4">
                         <filename>cloud-init-help-21.4-16.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1298</id>
          <title>An update for qemu is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-1050" id="CVE-2022-1050" title="CVE-2022-1050" type="cve"></reference>
          </references>
          <description>A flaw was found in the QEMU implementation of VMWare&#39;s paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.(CVE-2022-1050)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="qemu" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-system-arm" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-arm-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-hw-usb-host" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-hw-usb-host-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-debugsource" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-debugsource-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-img" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-img-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-block-curl" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-curl-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-guest-agent" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-guest-agent-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-block-rbd" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-rbd-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-debuginfo" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-debuginfo-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-system-aarch64" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-aarch64-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-system-riscv" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-riscv-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-block-ssh" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-ssh-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-system-x86_64" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-x86_64-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="qemu-block-iscsi" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-iscsi-6.2.0-74.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="qemu-help" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-help-6.2.0-74.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-debuginfo" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-debuginfo-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-block-curl" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-curl-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-block-ssh" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-ssh-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-system-aarch64" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-aarch64-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-hw-usb-host" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-hw-usb-host-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-debugsource" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-debugsource-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-block-rbd" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-rbd-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-system-arm" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-arm-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-img" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-img-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-seabios" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-seabios-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-block-iscsi" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-iscsi-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-guest-agent" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-guest-agent-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-system-riscv" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-riscv-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="qemu-system-x86_64" release="74.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-x86_64-6.2.0-74.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1299</id>
          <title>An update for libtpms is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-05-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1018" id="CVE-2023-1018" title="CVE-2023-1018" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1017" id="CVE-2023-1017" title="CVE-2023-1017" type="cve"></reference>
          </references>
          <description>An out-of-bounds read vulnerability exists in TPM2.0&#39;s Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.(CVE-2023-1018)An out-of-bounds write vulnerability exists in TPM2.0&#39;s Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.(CVE-2023-1017)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libtpms" release="8.oe2203sp1" version="0.7.3">
                         <filename>libtpms-0.7.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtpms-devel" release="8.oe2203sp1" version="0.7.3">
                         <filename>libtpms-devel-0.7.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtpms-debugsource" release="8.oe2203sp1" version="0.7.3">
                         <filename>libtpms-debugsource-0.7.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtpms-debuginfo" release="8.oe2203sp1" version="0.7.3">
                         <filename>libtpms-debuginfo-0.7.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtpms-debugsource" release="8.oe2203sp1" version="0.7.3">
                         <filename>libtpms-debugsource-0.7.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtpms-debuginfo" release="8.oe2203sp1" version="0.7.3">
                         <filename>libtpms-debuginfo-0.7.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtpms-devel" release="8.oe2203sp1" version="0.7.3">
                         <filename>libtpms-devel-0.7.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtpms" release="8.oe2203sp1" version="0.7.3">
                         <filename>libtpms-0.7.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1301</id>
          <title>An update for sysstat is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-33204" id="CVE-2023-33204" title="CVE-2023-33204" type="cve"></reference>
          </references>
          <description>sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.(CVE-2023-33204)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="sysstat-debuginfo" release="7.oe2203sp1" version="12.5.4">
                         <filename>sysstat-debuginfo-12.5.4-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sysstat-debugsource" release="7.oe2203sp1" version="12.5.4">
                         <filename>sysstat-debugsource-12.5.4-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sysstat" release="7.oe2203sp1" version="12.5.4">
                         <filename>sysstat-12.5.4-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sysstat-debugsource" release="7.oe2203sp1" version="12.5.4">
                         <filename>sysstat-debugsource-12.5.4-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sysstat" release="7.oe2203sp1" version="12.5.4">
                         <filename>sysstat-12.5.4-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sysstat-debuginfo" release="7.oe2203sp1" version="12.5.4">
                         <filename>sysstat-debuginfo-12.5.4-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1305</id>
          <title>An update for libssh is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1667" id="CVE-2023-1667" title="CVE-2023-1667" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2283" id="CVE-2023-2283" title="CVE-2023-2283" type="cve"></reference>
          </references>
          <description>A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.(CVE-2023-1667)A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.(CVE-2023-2283)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libssh-debugsource" release="7.oe2203sp1" version="0.9.6">
                         <filename>libssh-debugsource-0.9.6-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libssh" release="7.oe2203sp1" version="0.9.6">
                         <filename>libssh-0.9.6-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libssh-devel" release="7.oe2203sp1" version="0.9.6">
                         <filename>libssh-devel-0.9.6-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libssh-debuginfo" release="7.oe2203sp1" version="0.9.6">
                         <filename>libssh-debuginfo-0.9.6-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libssh-help" release="7.oe2203sp1" version="0.9.6">
                         <filename>libssh-help-0.9.6-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libssh" release="7.oe2203sp1" version="0.9.6">
                         <filename>libssh-0.9.6-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libssh-devel" release="7.oe2203sp1" version="0.9.6">
                         <filename>libssh-devel-0.9.6-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libssh-debugsource" release="7.oe2203sp1" version="0.9.6">
                         <filename>libssh-debugsource-0.9.6-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libssh-debuginfo" release="7.oe2203sp1" version="0.9.6">
                         <filename>libssh-debuginfo-0.9.6-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1310</id>
          <title>An update for webkit2gtk3 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32373" id="CVE-2023-32373" title="CVE-2023-32373" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28204" id="CVE-2023-28204" title="CVE-2023-28204" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32409" id="CVE-2023-32409" title="CVE-2023-32409" type="cve"></reference>
          </references>
          <description>A use after free vulnerability was found in the webkitgtk package. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-32373)A flaw was found in the webkitgtk package. An out of bounds read may be possible when processing malicious web content, which can lead to information disclosure.(CVE-2023-28204)A flaw was found in the WebGPU, part of the Webkit project. This flaw allows a remote attacker to break out of the Web Content sandbox.(CVE-2023-32409)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="webkit2gtk3-jsc" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-jsc-2.36.3-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="webkit2gtk3-debuginfo" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-debuginfo-2.36.3-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="webkit2gtk3-devel" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-devel-2.36.3-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="webkit2gtk3-debugsource" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-debugsource-2.36.3-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="webkit2gtk3-jsc-devel" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-jsc-devel-2.36.3-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="webkit2gtk3" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-2.36.3-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="webkit2gtk3-help" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-help-2.36.3-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="webkit2gtk3-jsc" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-jsc-2.36.3-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="webkit2gtk3" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-2.36.3-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="webkit2gtk3-debuginfo" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-debuginfo-2.36.3-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="webkit2gtk3-jsc-devel" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-jsc-devel-2.36.3-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="webkit2gtk3-debugsource" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-debugsource-2.36.3-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="webkit2gtk3-devel" release="4.oe2203sp1" version="2.36.3">
                         <filename>webkit2gtk3-devel-2.36.3-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1313</id>
          <title>An update for c-ares is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32067" id="CVE-2023-32067" title="CVE-2023-32067" type="cve"></reference>
          </references>
          <description>c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful shutdown of the connection. This issue has been patched in version 1.19.1.(CVE-2023-32067)c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom() are unavailable, c-ares uses rand() to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand() so will generate predictable output. Input from the random number generator is fed into a non-compilant RC4 implementation and may not be as strong as the original RC4 implementation. No attempt is made to look for modern OS-provided CSPRNGs like arc4random() that is widely available. This issue has been fixed in version 1.19.1.(CVE-2023-31147)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="c-ares-debuginfo" release="6.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debuginfo-1.18.1-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares-devel" release="6.oe2203sp1" version="1.18.1">
                         <filename>c-ares-devel-1.18.1-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares-debugsource" release="6.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debugsource-1.18.1-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares" release="6.oe2203sp1" version="1.18.1">
                         <filename>c-ares-1.18.1-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="c-ares-help" release="6.oe2203sp1" version="1.18.1">
                         <filename>c-ares-help-1.18.1-6.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-debuginfo" release="6.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debuginfo-1.18.1-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-devel" release="6.oe2203sp1" version="1.18.1">
                         <filename>c-ares-devel-1.18.1-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-debugsource" release="6.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debugsource-1.18.1-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares" release="6.oe2203sp1" version="1.18.1">
                         <filename>c-ares-1.18.1-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1315</id>
          <title>An update for cups-filters is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24805" id="CVE-2023-24805" title="CVE-2023-24805" type="cve"></reference>
          </references>
          <description>cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backend Error Handler (beh) to create an accessible network printer, this security vulnerability can cause remote code execution. `beh.c` contains the line `retval = system(cmdline) &gt;&gt; 8;` which calls the `system` command with the operand `cmdline`. `cmdline` contains multiple user controlled, unsanitized values. As a result an attacker with network access to the hosted print server can exploit this vulnerability to inject system commands which are executed in the context of the running server. This issue has been addressed in commit `8f2740357` and is expected to be bundled in the next release. Users are advised to upgrade when possible and to restrict access to network printers in the meantime.(CVE-2023-24805)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="cups-filters-devel" release="3.oe2203sp1" version="1.28.9">
                         <filename>cups-filters-devel-1.28.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-filters-debugsource" release="3.oe2203sp1" version="1.28.9">
                         <filename>cups-filters-debugsource-1.28.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-filters-debuginfo" release="3.oe2203sp1" version="1.28.9">
                         <filename>cups-filters-debuginfo-1.28.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-filters" release="3.oe2203sp1" version="1.28.9">
                         <filename>cups-filters-1.28.9-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="cups-filters-help" release="3.oe2203sp1" version="1.28.9">
                         <filename>cups-filters-help-1.28.9-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-filters" release="3.oe2203sp1" version="1.28.9">
                         <filename>cups-filters-1.28.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-filters-debugsource" release="3.oe2203sp1" version="1.28.9">
                         <filename>cups-filters-debugsource-1.28.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-filters-devel" release="3.oe2203sp1" version="1.28.9">
                         <filename>cups-filters-devel-1.28.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-filters-debuginfo" release="3.oe2203sp1" version="1.28.9">
                         <filename>cups-filters-debuginfo-1.28.9-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1316</id>
          <title>An update for libtiff is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2731" id="CVE-2023-2731" title="CVE-2023-2731" type="cve"></reference>
          </references>
          <description>A NULL pointer dereference flaw was found in Libtiff&#39;s LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.(CVE-2023-2731)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libtiff-tools" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debuginfo" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debugsource" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-devel" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-static" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libtiff-help" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-help-4.3.0-25.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debuginfo" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debugsource" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-tools" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-static" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-devel" release="25.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1317</id>
          <title>An update for libwebp is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1999" id="CVE-2023-1999" title="CVE-2023-1999" type="cve"></reference>
          </references>
          <description>A vulnerability was found in libwebp (affected version unknown). It has been declared as critical. Affected by this vulnerability is an unknown code of the component Image File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2023-1999)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libwebp" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-1.2.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwebp-debugsource" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-debugsource-1.2.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwebp-java" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-java-1.2.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwebp-debuginfo" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-debuginfo-1.2.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwebp-tools" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-tools-1.2.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwebp-devel" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-devel-1.2.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libwebp-help" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-help-1.2.1-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwebp" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-1.2.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwebp-debuginfo" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-debuginfo-1.2.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwebp-devel" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-devel-1.2.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwebp-tools" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-tools-1.2.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwebp-debugsource" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-debugsource-1.2.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwebp-java" release="3.oe2203sp1" version="1.2.1">
                         <filename>libwebp-java-1.2.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1318</id>
          <title>An update for libreswan is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-30570" id="CVE-2023-30570" title="CVE-2023-30570" type="cve"></reference>
          </references>
          <description>pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28.(CVE-2023-30570)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libreswan" release="1.oe2203sp1" version="4.11">
                         <filename>libreswan-4.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libreswan-help" release="1.oe2203sp1" version="4.11">
                         <filename>libreswan-help-4.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libreswan-debuginfo" release="1.oe2203sp1" version="4.11">
                         <filename>libreswan-debuginfo-4.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libreswan-debugsource" release="1.oe2203sp1" version="4.11">
                         <filename>libreswan-debugsource-4.11-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libreswan-debuginfo" release="1.oe2203sp1" version="4.11">
                         <filename>libreswan-debuginfo-4.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libreswan-debugsource" release="1.oe2203sp1" version="4.11">
                         <filename>libreswan-debugsource-4.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libreswan" release="1.oe2203sp1" version="4.11">
                         <filename>libreswan-4.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libreswan-help" release="1.oe2203sp1" version="4.11">
                         <filename>libreswan-help-4.11-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1322</id>
          <title>An update for wireshark is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2857" id="CVE-2023-2857" title="CVE-2023-2857" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2858" id="CVE-2023-2858" title="CVE-2023-2858" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2855" id="CVE-2023-2855" title="CVE-2023-2855" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0668" id="CVE-2023-0668" title="CVE-2023-0668" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2856" id="CVE-2023-2856" title="CVE-2023-2856" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2879" id="CVE-2023-2879" title="CVE-2023-2879" type="cve"></reference>
          </references>
          <description>BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file(CVE-2023-2857)NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file(CVE-2023-2858)Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file(CVE-2023-2855)A flaw was found in the IEEE C37.118 Synchrophasor dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.(CVE-2023-0668)VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file(CVE-2023-2856)GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file(CVE-2023-2879)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="wireshark-devel" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debugsource" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-help" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debuginfo" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-help" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-help-3.6.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debugsource" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debugsource-3.6.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-devel" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-devel-3.6.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-3.6.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debuginfo" release="4.oe2203sp1" version="3.6.11">
                         <filename>wireshark-debuginfo-3.6.11-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1324</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-22998" id="CVE-2023-22998" title="CVE-2023-22998" type="cve"></reference>
          </references>
          <description>In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).(CVE-2023-22998)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.34.0.110.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.34.0.110.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.34.0.110.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1327</id>
          <title>An update for hdf5 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-06-03"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2019-8396" id="CVE-2019-8396" title="CVE-2019-8396" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2018-13867" id="CVE-2018-13867" title="CVE-2018-13867" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-37501" id="CVE-2021-37501" title="CVE-2021-37501" type="cve"></reference>
          </references>
          <description>A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka &#34;Invalid write of size 2.&#34;(CVE-2019-8396)An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.(CVE-2018-13867)Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.(CVE-2021-37501)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="hdf5-mpich-static" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-static-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-debugsource" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-debugsource-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-mpich" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-openmpi-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-devel-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-debuginfo" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-debuginfo-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-devel-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-mpich-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-devel-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-openmpi-static" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-static-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="hdf5-openmpi" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-1.12.1-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-mpich" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-mpich-static" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-static-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-devel-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-openmpi-static" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-static-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-debuginfo" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-debuginfo-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-openmpi-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-devel-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-debugsource" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-debugsource-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-openmpi" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-openmpi-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="hdf5-mpich-devel" release="4.oe2203sp1" version="1.12.1">
                         <filename>hdf5-mpich-devel-1.12.1-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1333</id>
          <title>An update for ImageMagick is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2157" id="CVE-2023-2157" title="CVE-2023-2157" type="cve"></reference>
          </references>
          <description>A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.(CVE-2023-2157)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="ImageMagick" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-perl" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-devel" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debuginfo" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-help" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debugsource" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++-devel" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debuginfo" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++-devel" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-help" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debugsource" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-perl" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-devel" release="1.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1334</id>
          <title>An update for openldap is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2953" id="CVE-2023-2953" title="CVE-2023-2953" type="cve"></reference>
          </references>
          <description>A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.(CVE-2023-2953)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="openldap" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-2.6.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openldap-clients" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-clients-2.6.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openldap-devel" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-devel-2.6.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openldap-servers" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-servers-2.6.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openldap-debugsource" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-debugsource-2.6.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openldap-debuginfo" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-debuginfo-2.6.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="openldap-help" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-help-2.6.0-6.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openldap-debuginfo" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-debuginfo-2.6.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openldap" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-2.6.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openldap-debugsource" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-debugsource-2.6.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openldap-clients" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-clients-2.6.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openldap-devel" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-devel-2.6.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openldap-servers" release="6.oe2203sp1" version="2.6.0">
                         <filename>openldap-servers-2.6.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1335</id>
          <title>An update for cups is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32324" id="CVE-2023-32324" title="CVE-2023-32324" type="cve"></reference>
          </references>
          <description>OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.(CVE-2023-32324)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="cups-ipptool" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-ipptool-2.4.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-debugsource" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-debugsource-2.4.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-debuginfo" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-debuginfo-2.4.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-devel" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-devel-2.4.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-printerapp" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-printerapp-2.4.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-client" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-client-2.4.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-2.4.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-lpd" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-lpd-2.4.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cups-libs" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-libs-2.4.0-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="cups-help" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-help-2.4.0-6.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="cups-filesystem" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-filesystem-2.4.0-6.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-printerapp" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-printerapp-2.4.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-client" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-client-2.4.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-ipptool" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-ipptool-2.4.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-devel" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-devel-2.4.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-2.4.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-libs" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-libs-2.4.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-debuginfo" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-debuginfo-2.4.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-lpd" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-lpd-2.4.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cups-debugsource" release="6.oe2203sp1" version="2.4.0">
                         <filename>cups-debugsource-2.4.0-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1338</id>
          <title>An update for cpio is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Low</severity>
          <release>openEuler</release>
          <issued date="2023-06-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2015-1197" id="CVE-2015-1197" title="CVE-2015-1197" type="cve"></reference>
          </references>
          <description>cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.(CVE-2015-1197)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="cpio" release="8.oe2203sp1" version="2.13">
                         <filename>cpio-2.13-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cpio-debuginfo" release="8.oe2203sp1" version="2.13">
                         <filename>cpio-debuginfo-2.13-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cpio-debugsource" release="8.oe2203sp1" version="2.13">
                         <filename>cpio-debugsource-2.13-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="cpio-help" release="8.oe2203sp1" version="2.13">
                         <filename>cpio-help-2.13-8.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cpio-debuginfo" release="8.oe2203sp1" version="2.13">
                         <filename>cpio-debuginfo-2.13-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cpio" release="8.oe2203sp1" version="2.13">
                         <filename>cpio-2.13-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cpio-debugsource" release="8.oe2203sp1" version="2.13">
                         <filename>cpio-debugsource-2.13-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1340</id>
          <title>An update for c-ares is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-31147" id="CVE-2023-31147" title="CVE-2023-31147" type="cve"></reference>
          </references>
          <description>c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom() are unavailable, c-ares uses rand() to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand() so will generate predictable output. Input from the random number generator is fed into a non-compilant RC4 implementation and may not be as strong as the original RC4 implementation. No attempt is made to look for modern OS-provided CSPRNGs like arc4random() that is widely available. This issue has been fixed in version 1.19.1.(CVE-2023-31147)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="c-ares-devel" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-devel-1.18.1-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-1.18.1-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares-debugsource" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debugsource-1.18.1-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares-debuginfo" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debuginfo-1.18.1-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="c-ares-help" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-help-1.18.1-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-debugsource" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debugsource-1.18.1-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-devel" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-devel-1.18.1-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-1.18.1-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-debuginfo" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debuginfo-1.18.1-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1341</id>
          <title>An update for python-requests is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32681" id="CVE-2023-32681" title="CVE-2023-32681" type="cve"></reference>
          </references>
          <description>Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header to requests. For HTTP connections sent through the tunnel, the proxy will identify the header in the request itself and remove it prior to forwarding to the destination server. However when sent over HTTPS, the `Proxy-Authorization` header must be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious actor to potentially exfiltrate sensitive information. This issue has been patched in version 2.31.0.(CVE-2023-32681)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python-requests-help" release="8.oe2203sp1" version="2.26.0">
                         <filename>python-requests-help-2.26.0-8.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-requests" release="8.oe2203sp1" version="2.26.0">
                         <filename>python3-requests-2.26.0-8.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1342</id>
          <title>An update for libcap is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2602" id="CVE-2023-2602" title="CVE-2023-2602" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2603" id="CVE-2023-2603" title="CVE-2023-2603" type="cve"></reference>
          </references>
          <description>A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.(CVE-2023-2602)A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libcap-devel" release="5.oe2203sp1" version="2.61">
                         <filename>libcap-devel-2.61-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libcap" release="5.oe2203sp1" version="2.61">
                         <filename>libcap-2.61-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libcap-debugsource" release="5.oe2203sp1" version="2.61">
                         <filename>libcap-debugsource-2.61-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libcap-debuginfo" release="5.oe2203sp1" version="2.61">
                         <filename>libcap-debuginfo-2.61-5.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libcap-help" release="5.oe2203sp1" version="2.61">
                         <filename>libcap-help-2.61-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcap-debuginfo" release="5.oe2203sp1" version="2.61">
                         <filename>libcap-debuginfo-2.61-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcap-devel" release="5.oe2203sp1" version="2.61">
                         <filename>libcap-devel-2.61-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcap-debugsource" release="5.oe2203sp1" version="2.61">
                         <filename>libcap-debugsource-2.61-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcap" release="5.oe2203sp1" version="2.61">
                         <filename>libcap-2.61-5.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1346</id>
          <title>An update for curl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-10"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28322" id="CVE-2023-28322" title="CVE-2023-28322" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28321" id="CVE-2023-28321" title="CVE-2023-28321" type="cve"></reference>
          </references>
          <description>An information disclosure vulnerability exists in curl &lt;v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.(CVE-2023-28322)An improper certificate validation vulnerability exists in curl &lt;v8.1.0 in the way it supports matching of wildcard patterns when listed as &#34;Subject Alternative Name&#34; in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.(CVE-2023-28321)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libcurl-devel" release="17.oe2203sp1" version="7.79.1">
                         <filename>libcurl-devel-7.79.1-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl-debuginfo" release="17.oe2203sp1" version="7.79.1">
                         <filename>curl-debuginfo-7.79.1-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl-debugsource" release="17.oe2203sp1" version="7.79.1">
                         <filename>curl-debugsource-7.79.1-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libcurl" release="17.oe2203sp1" version="7.79.1">
                         <filename>libcurl-7.79.1-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl" release="17.oe2203sp1" version="7.79.1">
                         <filename>curl-7.79.1-17.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="curl-help" release="17.oe2203sp1" version="7.79.1">
                         <filename>curl-help-7.79.1-17.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl-debuginfo" release="17.oe2203sp1" version="7.79.1">
                         <filename>curl-debuginfo-7.79.1-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcurl-devel" release="17.oe2203sp1" version="7.79.1">
                         <filename>libcurl-devel-7.79.1-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl" release="17.oe2203sp1" version="7.79.1">
                         <filename>curl-7.79.1-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcurl" release="17.oe2203sp1" version="7.79.1">
                         <filename>libcurl-7.79.1-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl-debugsource" release="17.oe2203sp1" version="7.79.1">
                         <filename>curl-debugsource-7.79.1-17.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1350</id>
          <title>An update for ImageMagick is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34151" id="CVE-2023-34151" title="CVE-2023-34151" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34153" id="CVE-2023-34153" title="CVE-2023-34153" type="cve"></reference>
          </references>
          <description>A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546).(CVE-2023-34151)A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding.(CVE-2023-34153)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="ImageMagick" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debuginfo" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++-devel" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-perl" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-devel" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debugsource" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-help" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++-devel" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debugsource" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debuginfo" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-help" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-perl" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-devel" release="2.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1352</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2985" id="CVE-2023-2985" title="CVE-2023-2985" type="cve"></reference>
          </references>
          <description>A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem.(CVE-2023-2985)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-debugsource" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1360</id>
          <title>An update for c-ares is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-31130" id="CVE-2023-31130" title="CVE-2023-31130" type="cve"></reference>
          </references>
          <description>c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular &#34;0::00:00:00/2&#34; was found to cause an issue.  C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.(CVE-2023-31130)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="c-ares-debuginfo" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debuginfo-1.18.1-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-1.18.1-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares-devel" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-devel-1.18.1-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="c-ares-debugsource" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debugsource-1.18.1-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="c-ares-help" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-help-1.18.1-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-1.18.1-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-devel" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-devel-1.18.1-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-debuginfo" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debuginfo-1.18.1-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="c-ares-debugsource" release="7.oe2203sp1" version="1.18.1">
                         <filename>c-ares-debugsource-1.18.1-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1361</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-27"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-33288" id="CVE-2023-33288" title="CVE-2023-33288" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48502" id="CVE-2022-48502" title="CVE-2022-48502" type="cve"></reference>
          </references>
          <description>An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.(CVE-2023-33288)An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.(CVE-2022-48502)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1362</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-48502" id="CVE-2022-48502" title="CVE-2022-48502" type="cve"></reference>
          </references>
          <description>An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.(CVE-2022-48502)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.36.0.112.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.36.0.112.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1363</id>
          <title>An update for wireshark is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-06-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0667" id="CVE-2023-0667" title="CVE-2023-0667" type="cve"></reference>
          </references>
          <description>Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark(CVE-2023-0667)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="wireshark-devel" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-devel-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debugsource" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debugsource-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-help" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-help-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debuginfo" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debuginfo-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debugsource" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debugsource-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-help" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-help-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-devel" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-devel-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debuginfo" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debuginfo-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1364</id>
          <title>An update for cpp-httplib is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-25"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26130" id="CVE-2023-26130" title="CVE-2023-26130" type="cve"></reference>
          </references>
          <description>Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors.**Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).(CVE-2023-26130)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="cpp-httplib" release="1.oe2203sp1" version="0.12.4">
                         <filename>cpp-httplib-0.12.4-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cpp-httplib" release="1.oe2203sp1" version="0.12.4">
                         <filename>cpp-httplib-0.12.4-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1366</id>
          <title>An update for openssl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-06-27"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2650" id="CVE-2023-2650" title="CVE-2023-2650" type="cve"></reference>
          </references>
          <description>Issue summary: Processing some specially crafted ASN.1 object identifiers ordata containing them may be very slow.Impact summary: Applications that use OBJ_obj2txt() directly, or use any ofthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no messagesize limit may experience notable to very long delays when processing thosemessages, which may lead to a Denial of Service.An OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -most of which have no size limit.  OBJ_obj2txt() may be used to translatean ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSLtype ASN1_OBJECT) to its canonical numeric text form, which are thesub-identifiers of the OBJECT IDENTIFIER in decimal form, separated byperiods.When one of the sub-identifiers in the OBJECT IDENTIFIER is very large(these are sizes that are seen as absurdly large, taking up tens or hundredsof KiBs), the translation to a decimal number in text may take a very longtime.  The time complexity is O(n^2) with &#39;n&#39; being the size of thesub-identifiers in bytes (*).With OpenSSL 3.0, support to fetch cryptographic algorithms using names /identifiers in string form was introduced.  This includes using OBJECTIDENTIFIERs in canonical numeric text form as identifiers for fetchingalgorithms.Such OBJECT IDENTIFIERs may be received through the ASN.1 structureAlgorithmIdentifier, which is commonly used in multiple protocols to specifywhat cryptographic algorithm should be used to sign or verify, encrypt ordecrypt, or digest passed data.Applications that call OBJ_obj2txt() directly with untrusted data areaffected, with any version of OpenSSL.  If the use is for the mere purposeof display, the severity is considered low.In OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,CMS, CMP/CRMF or TS.  It also impacts anything that processes X.509certificates, including simple things like verifying its signature.The impact on TLS is relatively low, because all versions of OpenSSL have a100KiB limit on the peer&#39;s certificate chain.  Additionally, this onlyimpacts clients, or servers that have explicitly enabled clientauthentication.In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,such as X.509 certificates.  This is assumed to not happen in such a waythat it would cause a Denial of Service, so these versions are considerednot affected by this issue in such a way that it would be cause for concern,and the severity is therefore considered low.(CVE-2023-2650)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="openssl-debugsource" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-perl" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-debuginfo" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-devel" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-libs" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-22.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="openssl-help" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-help-1.1.1m-22.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debugsource" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-libs" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debuginfo" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-devel" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-perl" release="22.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-22.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1370</id>
          <title>An update for python-tornado is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-27"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-28370" id="CVE-2023-28370" title="CVE-2023-28370" type="cve"></reference>
          </references>
          <description>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.(CVE-2023-28370)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python3-tornado" release="2.oe2203sp1" version="6.1">
                         <filename>python3-tornado-6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python-tornado-debugsource" release="2.oe2203sp1" version="6.1">
                         <filename>python-tornado-debugsource-6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python-tornado-help" release="2.oe2203sp1" version="6.1">
                         <filename>python-tornado-help-6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python-tornado-debuginfo" release="2.oe2203sp1" version="6.1">
                         <filename>python-tornado-debuginfo-6.1-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-tornado-debugsource" release="2.oe2203sp1" version="6.1">
                         <filename>python-tornado-debugsource-6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-tornado-help" release="2.oe2203sp1" version="6.1">
                         <filename>python-tornado-help-6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-tornado-debuginfo" release="2.oe2203sp1" version="6.1">
                         <filename>python-tornado-debuginfo-6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-tornado" release="2.oe2203sp1" version="6.1">
                         <filename>python3-tornado-6.1-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1374</id>
          <title>An update for wireshark is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-06-27"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2952" id="CVE-2023-2952" title="CVE-2023-2952" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0667" id="CVE-2023-0667" title="CVE-2023-0667" type="cve"></reference>
          </references>
          <description>XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file(CVE-2023-2952)Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark(CVE-2023-0667)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="wireshark-devel" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-devel-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debugsource" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debugsource-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-help" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-help-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debuginfo" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debuginfo-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-3.6.14-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debugsource" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debugsource-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-help" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-help-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-devel" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-devel-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debuginfo" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debuginfo-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark" release="1.oe2203sp1" version="3.6.14">
                         <filename>wireshark-3.6.14-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1375</id>
          <title>An update for dbus is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-06-27"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34969" id="CVE-2023-34969" title="CVE-2023-34969" type="cve"></reference>
          </references>
          <description>D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.(CVE-2023-34969)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="dbus-x11" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-x11-1.12.20-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="dbus-libs" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-libs-1.12.20-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="dbus" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-1.12.20-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="dbus-debugsource" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-debugsource-1.12.20-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="dbus-devel" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-devel-1.12.20-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="dbus-debuginfo" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-debuginfo-1.12.20-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="dbus-daemon" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-daemon-1.12.20-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="dbus-tools" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-tools-1.12.20-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="dbus-common" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-common-1.12.20-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="dbus-help" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-help-1.12.20-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dbus-tools" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-tools-1.12.20-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dbus-debuginfo" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-debuginfo-1.12.20-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dbus-debugsource" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-debugsource-1.12.20-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dbus-x11" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-x11-1.12.20-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dbus" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-1.12.20-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dbus-daemon" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-daemon-1.12.20-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dbus-libs" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-libs-1.12.20-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="dbus-devel" release="9.oe2203sp1" version="1.12.20">
                         <filename>dbus-devel-1.12.20-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1395</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3006" id="CVE-2023-3006" title="CVE-2023-3006" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-31084" id="CVE-2023-31084" title="CVE-2023-31084" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3161" id="CVE-2023-3161" title="CVE-2023-3161" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3212" id="CVE-2023-3212" title="CVE-2023-3212" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34256" id="CVE-2023-34256" title="CVE-2023-34256" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-35788" id="CVE-2023-35788" title="CVE-2023-35788" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-35823" id="CVE-2023-35823" title="CVE-2023-35823" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-35824" id="CVE-2023-35824" title="CVE-2023-35824" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-35828" id="CVE-2023-35828" title="CVE-2023-35828" type="cve"></reference>
          </references>
          <description>A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim&#39;s hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.(CVE-2023-3006)An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&amp;fepriv-&gt;sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&amp;fepriv-&gt;sem) may block the process.(CVE-2023-31084)A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font-&gt;width and font-&gt;height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.(CVE-2023-3161)A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.(CVE-2023-3212)** DISPUTED ** An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated &#34;When modifying the block device while it is mounted by the filesystem&#34; access.(CVE-2023-34256)An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.(CVE-2023-35788)An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.(CVE-2023-35823)An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.(CVE-2023-35824)An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.(CVE-2023-35828)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python3-perf" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.39.0.116.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.39.0.116.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.39.0.116.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1398</id>
          <title>An update for snappy-java is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34454" id="CVE-2023-34454" title="CVE-2023-34454" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34455" id="CVE-2023-34455" title="CVE-2023-34455" type="cve"></reference>
          </references>
          <description>snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing an unrecoverable fatal error.The function `compress(char[] input)` in the file `Snappy.java` receives an array of characters and compresses it. It does so by multiplying the length by 2 and passing it to the rawCompress` function.Since the length is not tested, the multiplication by two can cause an integer overflow and become negative. The rawCompress function then uses the received length and passes it to the natively compiled maxCompressedLength function, using the returned value to allocate a byte array.Since the maxCompressedLength function treats the length as an unsigned integer, it doesn’t care that it is negative, and it returns a valid value, which is casted to a signed integer by the Java engine. If the result is negative, a `java.lang.NegativeArraySizeException` exception will be raised while trying to allocate the array `buf`. On the other side, if the result is positive, the `buf` array will successfully be allocated, but its size might be too small to use for the compression, causing a fatal Access Violation error.The same issue exists also when using the `compress` functions that receive double, float, int, long and short, each using a different multiplier that may cause the same issue. The issue most likely won’t occur when using a byte array, since creating a byte array of size 0x80000000 (or any other negative value) is impossible in the first place.Version 1.1.10.1 contains a patch for this issue.(CVE-2023-34454)snappy-java is a fast compressor/decompressor for Java. Due to use of an unchecked chunk length, an unrecoverable fatal error can occur in versions prior to 1.1.10.1.The code in the function hasNextChunk in the fileSnappyInputStream.java checks if a given stream has more chunks to read. It does that by attempting to read 4 bytes. If it wasn’t possible to read the 4 bytes, the function returns false. Otherwise, if 4 bytes were available, the code treats them as the length of the next chunk.In the case that the `compressed` variable is null, a byte array is allocated with the size given by the input data. Since the code doesn’t test the legality of the `chunkSize` variable, it is possible to pass a negative number (such as 0xFFFFFFFF which is -1), which will cause the code to raise a `java.lang.NegativeArraySizeException` exception. A worse case would happen when passing a huge positive value (such as 0x7FFFFFFF), which would raise the fatal `java.lang.OutOfMemoryError` error.Version 1.1.10.1 contains a patch for this issue.(CVE-2023-34455)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="snappy-java" release="2.oe2203sp1" version="1.1.2.4">
                         <filename>snappy-java-1.1.2.4-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="snappy-java-javadoc" release="2.oe2203sp1" version="1.1.2.4">
                         <filename>snappy-java-javadoc-1.1.2.4-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="snappy-java" release="2.oe2203sp1" version="1.1.2.4">
                         <filename>snappy-java-1.1.2.4-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1399</id>
          <title>An update for librabbitmq is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-35789" id="CVE-2023-35789" title="CVE-2023-35789" type="cve"></reference>
          </references>
          <description>An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.(CVE-2023-35789)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="librabbitmq-devel" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-devel-0.9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="librabbitmq-help" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-help-0.9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="librabbitmq-debuginfo" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-debuginfo-0.9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="librabbitmq-debugsource" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-debugsource-0.9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="librabbitmq" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-0.9.0-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="librabbitmq-debugsource" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-debugsource-0.9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="librabbitmq-devel" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-devel-0.9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="librabbitmq-debuginfo" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-debuginfo-0.9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="librabbitmq-help" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-help-0.9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="librabbitmq" release="9.oe2203sp1" version="0.9.0">
                         <filename>librabbitmq-0.9.0-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1400</id>
          <title>An update for perl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-31486" id="CVE-2023-31486" title="CVE-2023-31486" type="cve"></reference>
          </references>
          <description>HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.(CVE-2023-31486)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="4" arch="aarch64" name="perl-debugsource" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-debugsource-5.34.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="aarch64" name="perl-libs" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-libs-5.34.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="aarch64" name="perl-debuginfo" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-debuginfo-5.34.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="aarch64" name="perl" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-5.34.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="aarch64" name="perl-devel" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-devel-5.34.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="4" arch="noarch" name="perl-help" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-help-5.34.0-8.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl-debugsource" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-debugsource-5.34.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl-devel" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-devel-5.34.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl-libs" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-libs-5.34.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-5.34.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="4" arch="x86_64" name="perl-debuginfo" release="8.oe2203sp1" version="5.34.0">
                         <filename>perl-debuginfo-5.34.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1402</id>
          <title>An update for libtiff is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25433" id="CVE-2023-25433" title="CVE-2023-25433" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-26966" id="CVE-2023-26966" title="CVE-2023-26966" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2908" id="CVE-2023-2908" title="CVE-2023-2908" type="cve"></reference>
          </references>
          <description>libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.(CVE-2023-25433)libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.(CVE-2023-26966)A null pointer dereference issue was discovered in Libtiff&#39;s tif_dir.c file. This flaw allows an attacker to pass a crafted TIFF image file to the tiffcp utility, which triggers runtime error, causing an undefined behavior, resulting in an application crash, eventually leading to a denial of service.(CVE-2023-2908)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libtiff-tools" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-28.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debuginfo" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-28.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-28.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-static" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-28.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-devel" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-28.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debugsource" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-28.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libtiff-help" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-help-4.3.0-28.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debuginfo" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-28.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-28.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debugsource" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-28.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-static" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-28.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-tools" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-28.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-devel" release="28.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-28.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1403</id>
          <title>An update for tang is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1672" id="CVE-2023-1672" title="CVE-2023-1672" type="cve"></reference>
          </references>
          <description>A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.(CVE-2023-1672)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="tang-debuginfo" release="3.oe2203sp1" version="7">
                         <filename>tang-debuginfo-7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tang-debugsource" release="3.oe2203sp1" version="7">
                         <filename>tang-debugsource-7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="tang" release="3.oe2203sp1" version="7">
                         <filename>tang-7-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="tang-help" release="3.oe2203sp1" version="7">
                         <filename>tang-help-7-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tang" release="3.oe2203sp1" version="7">
                         <filename>tang-7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tang-debuginfo" release="3.oe2203sp1" version="7">
                         <filename>tang-debuginfo-7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="tang-debugsource" release="3.oe2203sp1" version="7">
                         <filename>tang-debugsource-7-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1404</id>
          <title>An update for golang is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-29403" id="CVE-2023-29403" title="CVE-2023-29403" type="cve"></reference>
          </references>
          <description>On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.(CVE-2023-29403)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="golang" release="19.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-19.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-help" release="19.oe2203sp1" version="1.17.3">
                         <filename>golang-help-1.17.3-19.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-devel" release="19.oe2203sp1" version="1.17.3">
                         <filename>golang-devel-1.17.3-19.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="golang" release="19.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-19.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1408</id>
          <title>An update for ImageMagick is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34474" id="CVE-2023-34474" title="CVE-2023-34474" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34475" id="CVE-2023-34475" title="CVE-2023-34475" type="cve"></reference>
          </references>
          <description>A heap-based buffer overflow issue was discovered in ImageMagick&#39;s ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.(CVE-2023-34474)A heap use after free issue was discovered in ImageMagick&#39;s ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service.(CVE-2023-34475)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="ImageMagick-perl" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debuginfo" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++-devel" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debugsource" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-devel" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-help" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++-devel" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debuginfo" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-perl" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debugsource" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-help" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-devel" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick" release="3.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1410</id>
          <title>An update for cups is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34241" id="CVE-2023-34241" title="CVE-2023-34241" type="cve"></reference>
          </references>
          <description>OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.The exact cause of this issue is the function `httpClose(con-&gt;http)` being called in `scheduler/client.c`. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function `cupsdAcceptClient` if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in `cupsd.conf`) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from `/etc/hosts.allow` and `/etc/hosts.deny`.Version 2.4.6 has a patch for this issue.(CVE-2023-34241)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="cups-printerapp" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-printerapp-2.4.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="cups-lpd" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-lpd-2.4.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="cups-libs" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-libs-2.4.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="cups" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-2.4.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="cups-client" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-client-2.4.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="cups-debuginfo" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-debuginfo-2.4.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="cups-devel" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-devel-2.4.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="cups-ipptool" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-ipptool-2.4.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="cups-debugsource" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-debugsource-2.4.0-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="cups-filesystem" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-filesystem-2.4.0-8.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="cups-help" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-help-2.4.0-8.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="cups-libs" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-libs-2.4.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="cups-client" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-client-2.4.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="cups-devel" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-devel-2.4.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="cups-printerapp" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-printerapp-2.4.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="cups-lpd" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-lpd-2.4.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="cups-ipptool" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-ipptool-2.4.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="cups-debugsource" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-debugsource-2.4.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="cups" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-2.4.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="cups-debuginfo" release="8.oe2203sp1" version="2.4.0">
                         <filename>cups-debuginfo-2.4.0-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1411</id>
          <title>An update for guava20 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2976" id="CVE-2023-2976" title="CVE-2023-2976" type="cve"></reference>
          </references>
          <description>Use of Java&#39;s default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.(CVE-2023-2976)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="guava20-help" release="11.oe2203sp1" version="20.0">
                         <filename>guava20-help-20.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="guava20" release="11.oe2203sp1" version="20.0">
                         <filename>guava20-20.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1412</id>
          <title>An update for guava is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2976" id="CVE-2023-2976" title="CVE-2023-2976" type="cve"></reference>
          </references>
          <description>Use of Java&#39;s default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.(CVE-2023-2976)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="guava-help" release="6.oe2203sp1" version="25.0">
                         <filename>guava-help-25.0-6.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="guava" release="6.oe2203sp1" version="25.0">
                         <filename>guava-25.0-6.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="guava-testlib" release="6.oe2203sp1" version="25.0">
                         <filename>guava-testlib-25.0-6.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1415</id>
          <title>An update for kubernetes is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3162" id="CVE-2022-3162" title="CVE-2022-3162" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-3294" id="CVE-2022-3294" title="CVE-2022-3294" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2431" id="CVE-2023-2431" title="CVE-2023-2431" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2727" id="CVE-2023-2727" title="CVE-2023-2727" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2728" id="CVE-2023-2728" title="CVE-2023-2728" type="cve"></reference>
          </references>
          <description>Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions sharing the same API group 2. Users have cluster-wide list or watch authorization on one of those custom resources. 3. The same users are not authorized to read another custom resource in the same API group.(CVE-2022-3162)Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to establish connections to Pods, retrieve container logs, and more. While Kubernetes already validates the proxying address for Nodes, a bug in kube-apiserver made it possible to bypass this validation. Bypassing this validation could allow authenticated requests destined for Nodes to to the API server&#39;s private network.(CVE-2022-3294)A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.(CVE-2023-2431)Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.(CVE-2023-2727)Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the `kubernetes.io/enforce-mountable-secrets` annotation are used together with ephemeral containers.(CVE-2023-2728)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kubernetes" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-1.20.2-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-help" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-help-1.20.2-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-node" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-node-1.20.2-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-client" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-client-1.20.2-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-master" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-master-1.20.2-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-kubeadm" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-kubeadm-1.20.2-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kubernetes-kubelet" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-kubelet-1.20.2-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-client" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-client-1.20.2-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-help" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-help-1.20.2-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-kubeadm" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-kubeadm-1.20.2-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-1.20.2-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-master" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-master-1.20.2-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-kubelet" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-kubelet-1.20.2-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kubernetes-node" release="20.oe2203sp1" version="1.20.2">
                         <filename>kubernetes-node-1.20.2-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1420</id>
          <title>An update for perl-CPAN is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-31484" id="CVE-2023-31484" title="CVE-2023-31484" type="cve"></reference>
          </references>
          <description>CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.(CVE-2023-31484)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="perl-CPAN" release="2.oe2203sp1" version="2.29">
                         <filename>perl-CPAN-2.29-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="perl-CPAN-help" release="2.oe2203sp1" version="2.29">
                         <filename>perl-CPAN-help-2.29-2.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1421</id>
          <title>An update for texlive-base is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-08"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32700" id="CVE-2023-32700" title="CVE-2023-32700" type="cve"></reference>
          </references>
          <description>LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.(CVE-2023-32700)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="7" arch="aarch64" name="texlive-base-debuginfo" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-base-debuginfo-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-lcdftypetools" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lcdftypetools-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-vlna" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-vlna-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-patgen" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-patgen-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-axodraw2" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-axodraw2-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dtl" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dtl-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-tex4ht" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-tex4ht-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-ttfutils" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ttfutils-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-uptex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-uptex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-synctex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-synctex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-bibtexu" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-bibtexu-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-lib" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lib-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dvisvgm" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvisvgm-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-musixtnt" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-musixtnt-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-velthuis" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-velthuis-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-pdftex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pdftex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-base" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-base-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-gregoriotex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-gregoriotex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dvidvi" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvidvi-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dvipos" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvipos-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-bibtex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-bibtex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-xdvi" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-xdvi-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-bibtex8" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-bibtex8-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-gsftopk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-gsftopk-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-seetexk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-seetexk-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-ptex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ptex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-xetex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-xetex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-afm2pl" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-afm2pl-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dvipdfmx" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvipdfmx-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dvipng" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvipng-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-detex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-detex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-tex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-tex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-kpathsea" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-kpathsea-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-omegaware" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-omegaware-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-cjkutils" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-cjkutils-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-makeindex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-makeindex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-autosp" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-autosp-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-chktex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-chktex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-tie" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-tie-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-pmx" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pmx-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-luatex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-luatex-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-m-tx" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-m-tx-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-lib-devel" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lib-devel-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-aleph" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-aleph-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-mfware" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mfware-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-mflua" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mflua-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-pdftools" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pdftools-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-web" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-web-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-base-debugsource" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-base-debugsource-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-ctie" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ctie-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-metapost" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-metapost-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-cweb" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-cweb-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-ps2pk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ps2pk-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-fontware" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-fontware-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dvips" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvips-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dvi2tty" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvi2tty-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-metafont" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-metafont-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dviljk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dviljk-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-texware" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texware-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-dvicopy" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvicopy-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-pstools" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pstools-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="aarch64" name="texlive-lacheck" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lacheck-20180414-34.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-latexdiff" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-latexdiff-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-dtxgen" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dtxgen-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-accfonts" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-accfonts-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-authorindex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-authorindex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-arara" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-arara-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-jfmutil" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-jfmutil-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-make4ht" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-make4ht-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-fontinst" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-fontinst-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-latexfileversion" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-latexfileversion-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-cslatex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-cslatex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-checkcites" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-checkcites-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texlive-en" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texlive-en-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-findhyph" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-findhyph-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texdiff" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texdiff-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-epspdf" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-epspdf-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-latex2nemeth" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-latex2nemeth-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-getmap" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-getmap-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-vpe" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-vpe-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-ulqda" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ulqda-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-yplan" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-yplan-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-rubik" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-rubik-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-dosepsbin" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dosepsbin-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-lua2dox" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lua2dox-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-mf2pt1" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mf2pt1-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pdfcrop" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pdfcrop-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texfot" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texfot-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-luaotfload" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-luaotfload-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-mkjobtexmf" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mkjobtexmf-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-epstopdf" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-epstopdf-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="texlive-ctanupload" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ctanupload-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-installfont" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-installfont-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-thumbpdf" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-thumbpdf-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texloganalyser" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texloganalyser-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-mex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-eplain" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-eplain-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-latexpand" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-latexpand-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-splitindex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-splitindex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="texlive-latexindent" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-latexindent-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-lyluatex" release="34.oe2203sp1" version="svn47584">
                         <filename>texlive-lyluatex-svn47584-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-cachepic" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-cachepic-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-ebong" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ebong-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-lollipop" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lollipop-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-fig4latex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-fig4latex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-match_parens" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-match_parens-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-fontools" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-fontools-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-ltxfileinfo" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ltxfileinfo-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texlive-scripts" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texlive-scripts-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-ptex-fontmaps" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ptex-fontmaps-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pfarrei" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pfarrei-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-l3build" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-l3build-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-srcredact" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-srcredact-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-latex-papersize" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-latex-papersize-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-tpic2pdftex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-tpic2pdftex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="texlive-exceltex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-exceltex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-context" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-context-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-jadetex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-jadetex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-crossrefware" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-crossrefware-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-mptopdf" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mptopdf-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texosquery" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texosquery-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pdfjam" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pdfjam-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-adhocfilelist" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-adhocfilelist-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pkfix-helper" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pkfix-helper-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texlive.infra" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texlive.infra-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-oberdiek" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-oberdiek-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-convbkmk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-convbkmk-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texdirflatten" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texdirflatten-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pst2pdf" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pst2pdf-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-multibibliography" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-multibibliography-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pdflatexpicscale" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pdflatexpicscale-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pythontex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pythontex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-fragmaster" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-fragmaster-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texcount" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texcount-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-svn-multi" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-svn-multi-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-mltex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mltex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-dviasm" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dviasm-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-a2ping" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-a2ping-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texdoctk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texdoctk-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-wordcount" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-wordcount-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-ptex2pdf" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ptex2pdf-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-ltximg" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ltximg-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-kotex-utils" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-kotex-utils-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-makedtx" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-makedtx-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-mkpic" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mkpic-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-checklistings" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-checklistings-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-csplain" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-csplain-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-de-macro" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-de-macro-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-lwarp" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lwarp-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pygmentex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pygmentex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pdfbook2" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pdfbook2-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-tetex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-tetex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pedigree-perl" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pedigree-perl-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-xmltex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-xmltex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-mkgrkindex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mkgrkindex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-latex2man" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-latex2man-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-petri-nets" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-petri-nets-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texconfig" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texconfig-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pmxchords" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pmxchords-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-ctanify" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ctanify-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-latex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-latex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-bibexport" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-bibexport-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-diadia" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-diadia-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texdoc" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texdoc-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-tex4ebook" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-tex4ebook-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-bib2gls" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-bib2gls-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pst-pdf" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pst-pdf-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-cyrillic" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-cyrillic-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-typeoutfileinfo" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-typeoutfileinfo-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-purifyeps" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-purifyeps-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texdef" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texdef-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pkfix" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pkfix-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-dviinfox" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dviinfox-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-amstex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-amstex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-urlbst" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-urlbst-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pax" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pax-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-musixtex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-musixtex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-mathspic" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mathspic-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-bundledoc" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-bundledoc-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-latex-git-log" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-latex-git-log-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-listbib" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-listbib-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-sty2dtx" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-sty2dtx-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-perltex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-perltex-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texsis" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texsis-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-texliveonfly" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texliveonfly-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-ctan-o-mat" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ctan-o-mat-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-lilyglyphs" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lilyglyphs-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-glyphlist" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-glyphlist-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-listings-ext" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-listings-ext-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-pdfxup" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pdfxup-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="noarch" name="texlive-glossaries" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-glossaries-20180414-34.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-aleph" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-aleph-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-tex4ht" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-tex4ht-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-mflua" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mflua-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-uptex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-uptex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-ttfutils" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ttfutils-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-gregoriotex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-gregoriotex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dvipos" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvipos-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dvips" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvips-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dvicopy" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvicopy-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-base-debugsource" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-base-debugsource-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-ptex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ptex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dvipdfmx" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvipdfmx-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-m-tx" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-m-tx-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-cjkutils" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-cjkutils-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-lib" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lib-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-xdvi" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-xdvi-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-metapost" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-metapost-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-gsftopk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-gsftopk-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-chktex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-chktex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-lib-devel" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lib-devel-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-musixtnt" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-musixtnt-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-base-debuginfo" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-base-debuginfo-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-kpathsea" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-kpathsea-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-texware" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-texware-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-pdftools" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pdftools-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-ctie" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ctie-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-omegaware" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-omegaware-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-pstools" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pstools-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-mfware" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-mfware-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-lcdftypetools" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lcdftypetools-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-pdftex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pdftex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-bibtex8" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-bibtex8-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-bibtexu" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-bibtexu-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-fontware" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-fontware-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dvi2tty" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvi2tty-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-base" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-base-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-synctex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-synctex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-bibtex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-bibtex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-afm2pl" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-afm2pl-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-xetex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-xetex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-velthuis" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-velthuis-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dvidvi" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvidvi-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-tie" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-tie-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-axodraw2" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-axodraw2-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-metafont" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-metafont-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-vlna" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-vlna-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dvisvgm" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvisvgm-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dviljk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dviljk-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-pmx" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-pmx-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-autosp" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-autosp-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-detex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-detex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-lacheck" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-lacheck-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-ps2pk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-ps2pk-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dtl" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dtl-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-tex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-tex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-seetexk" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-seetexk-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-web" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-web-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-luatex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-luatex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-patgen" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-patgen-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-cweb" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-cweb-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-dvipng" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-dvipng-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="7" arch="x86_64" name="texlive-makeindex" release="34.oe2203sp1" version="20180414">
                         <filename>texlive-makeindex-20180414-34.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1422</id>
          <title>An update for syslinux is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-07-15"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2016-9841" id="CVE-2016-9841" title="CVE-2016-9841" type="cve"></reference>
          </references>
          <description>inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.(CVE-2016-9841)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="syslinux-nonlinux" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-nonlinux-6.04-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="syslinux-extlinux-nonlinux" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-extlinux-nonlinux-6.04-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="syslinux-tftpboot" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-tftpboot-6.04-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-devel" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-devel-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-perl" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-perl-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-extlinux" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-extlinux-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-debuginfo" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-debuginfo-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-debugsource" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-debugsource-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-efi64" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-efi64-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1424</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-15"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3389" id="CVE-2023-3389" title="CVE-2023-3389" type="cve"></reference>
          </references>
          <description>A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer.We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59 (4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and 0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable).(CVE-2023-3389)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="perf-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.40.0.117.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.40.0.117.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.40.0.117.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1426</id>
          <title>An update for ncurses is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-15"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-29491" id="CVE-2023-29491" title="CVE-2023-29491" type="cve"></reference>
          </references>
          <description>ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.(CVE-2023-29491)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="ncurses-compat-libs" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-compat-libs-6.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ncurses-static" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-static-6.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ncurses-devel" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-devel-6.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ncurses-debuginfo" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-debuginfo-6.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ncurses-debugsource" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-debugsource-6.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ncurses-help" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-help-6.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ncurses" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-6.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ncurses-libs" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-libs-6.3-8.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="ncurses-base" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-base-6.3-8.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ncurses-static" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-static-6.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ncurses-compat-libs" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-compat-libs-6.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ncurses-help" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-help-6.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ncurses-libs" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-libs-6.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ncurses-devel" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-devel-6.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ncurses-debugsource" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-debugsource-6.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ncurses" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-6.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ncurses-debuginfo" release="8.oe2203sp1" version="6.3">
                         <filename>ncurses-debuginfo-6.3-8.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1427</id>
          <title>An update for ruby is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-15"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-36617" id="CVE-2023-36617" title="CVE-2023-36617" type="cve"></reference>
          </references>
          <description>A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.(CVE-2023-36617)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="ruby-devel" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-devel-3.0.3-131.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-bigdecimal" release="131.oe2203sp1" version="3.0.0">
                         <filename>rubygem-bigdecimal-3.0.0-131.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-io-console" release="131.oe2203sp1" version="0.5.7">
                         <filename>rubygem-io-console-0.5.7-131.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-psych" release="131.oe2203sp1" version="3.3.2">
                         <filename>rubygem-psych-3.3.2-131.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby-debuginfo" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-debuginfo-3.0.3-131.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-3.0.3-131.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-json" release="131.oe2203sp1" version="2.5.1">
                         <filename>rubygem-json-2.5.1-131.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="rubygem-openssl" release="131.oe2203sp1" version="2.2.1">
                         <filename>rubygem-openssl-2.2.1-131.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ruby-debugsource" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-debugsource-3.0.3-131.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="ruby-irb" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-irb-3.0.3-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rss" release="131.oe2203sp1" version="0.2.9">
                         <filename>rubygem-rss-0.2.9-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygems" release="131.oe2203sp1" version="3.2.32">
                         <filename>rubygems-3.2.32-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-did_you_mean" release="131.oe2203sp1" version="1.5.0">
                         <filename>rubygem-did_you_mean-1.5.0-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-typeprof" release="131.oe2203sp1" version="0.15.2">
                         <filename>rubygem-typeprof-0.15.2-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rbs" release="131.oe2203sp1" version="1.4.0">
                         <filename>rubygem-rbs-1.4.0-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-test-unit" release="131.oe2203sp1" version="3.3.7">
                         <filename>rubygem-test-unit-3.3.7-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygems-devel" release="131.oe2203sp1" version="3.2.32">
                         <filename>rubygems-devel-3.2.32-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-minitest" release="131.oe2203sp1" version="5.14.2">
                         <filename>rubygem-minitest-5.14.2-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rake" release="131.oe2203sp1" version="13.0.3">
                         <filename>rubygem-rake-13.0.3-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rdoc" release="131.oe2203sp1" version="6.3.3">
                         <filename>rubygem-rdoc-6.3.3-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="ruby-help" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-help-3.0.3-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-rexml" release="131.oe2203sp1" version="3.2.5">
                         <filename>rubygem-rexml-3.2.5-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="rubygem-bundler" release="131.oe2203sp1" version="2.2.32">
                         <filename>rubygem-bundler-2.2.32-131.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-psych" release="131.oe2203sp1" version="3.3.2">
                         <filename>rubygem-psych-3.3.2-131.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-json" release="131.oe2203sp1" version="2.5.1">
                         <filename>rubygem-json-2.5.1-131.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-bigdecimal" release="131.oe2203sp1" version="3.0.0">
                         <filename>rubygem-bigdecimal-3.0.0-131.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-openssl" release="131.oe2203sp1" version="2.2.1">
                         <filename>rubygem-openssl-2.2.1-131.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="rubygem-io-console" release="131.oe2203sp1" version="0.5.7">
                         <filename>rubygem-io-console-0.5.7-131.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby-debuginfo" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-debuginfo-3.0.3-131.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-3.0.3-131.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby-devel" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-devel-3.0.3-131.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ruby-debugsource" release="131.oe2203sp1" version="3.0.3">
                         <filename>ruby-debugsource-3.0.3-131.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1431</id>
          <title>An update for edk2 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-15"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-4304" id="CVE-2022-4304" title="CVE-2022-4304" type="cve"></reference>
          </references>
          <description>A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.(CVE-2022-4304)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="edk2-debuginfo" release="12.oe2203sp1" version="202011">
                         <filename>edk2-debuginfo-202011-12.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="edk2-devel" release="12.oe2203sp1" version="202011">
                         <filename>edk2-devel-202011-12.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="edk2-debugsource" release="12.oe2203sp1" version="202011">
                         <filename>edk2-debugsource-202011-12.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="edk2-help" release="12.oe2203sp1" version="202011">
                         <filename>edk2-help-202011-12.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-edk2-devel" release="12.oe2203sp1" version="202011">
                         <filename>python3-edk2-devel-202011-12.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="edk2-aarch64" release="12.oe2203sp1" version="202011">
                         <filename>edk2-aarch64-202011-12.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="edk2-ovmf" release="12.oe2203sp1" version="202011">
                         <filename>edk2-ovmf-202011-12.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="edk2-debugsource" release="12.oe2203sp1" version="202011">
                         <filename>edk2-debugsource-202011-12.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="edk2-devel" release="12.oe2203sp1" version="202011">
                         <filename>edk2-devel-202011-12.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="edk2-debuginfo" release="12.oe2203sp1" version="202011">
                         <filename>edk2-debuginfo-202011-12.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1432</id>
          <title>An update for gnuplot is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-07-15"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2020-25969" id="CVE-2020-25969" title="CVE-2020-25969" type="cve"></reference>
          </references>
          <description>gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().(CVE-2020-25969)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="gnuplot-debugsource" release="14.oe2203sp1" version="5.0.6">
                         <filename>gnuplot-debugsource-5.0.6-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gnuplot" release="14.oe2203sp1" version="5.0.6">
                         <filename>gnuplot-5.0.6-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="gnuplot-debuginfo" release="14.oe2203sp1" version="5.0.6">
                         <filename>gnuplot-debuginfo-5.0.6-14.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="gnuplot-help" release="14.oe2203sp1" version="5.0.6">
                         <filename>gnuplot-help-5.0.6-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gnuplot-debuginfo" release="14.oe2203sp1" version="5.0.6">
                         <filename>gnuplot-debuginfo-5.0.6-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gnuplot" release="14.oe2203sp1" version="5.0.6">
                         <filename>gnuplot-5.0.6-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="gnuplot-debugsource" release="14.oe2203sp1" version="5.0.6">
                         <filename>gnuplot-debugsource-5.0.6-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1433</id>
          <title>An update for zlib is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-07-17"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2016-9840" id="CVE-2016-9840" title="CVE-2016-9840" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2016-9842" id="CVE-2016-9842" title="CVE-2016-9842" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2016-9843" id="CVE-2016-9843" title="CVE-2016-9843" type="cve"></reference>
          </references>
          <description>inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.(CVE-2016-9840)The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.(CVE-2016-9842)CVE-2016-9840:inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.  CVE-2016-9841:inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.  CVE-2016-9842:The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.  CVE-2016-9843:The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.(CVE-2016-9843)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="syslinux-tftpboot" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-tftpboot-6.04-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="syslinux-nonlinux" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-nonlinux-6.04-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="syslinux-extlinux-nonlinux" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-extlinux-nonlinux-6.04-14.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-debugsource" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-debugsource-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-extlinux" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-extlinux-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-debuginfo" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-debuginfo-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-efi64" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-efi64-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-perl" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-perl-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="syslinux-devel" release="14.oe2203sp1" version="6.04">
                         <filename>syslinux-devel-6.04-14.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1434</id>
          <title>An update for libtiff is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3576" id="CVE-2023-3576" title="CVE-2023-3576" type="cve"></reference>
          </references>
          <description>A vulnerability was found in libtiff where a memory leak exists in tools/tiffcrop.c.References:https://gitlab.com/libtiff/libtiff/-/merge_requests/475(CVE-2023-3576)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libtiff-debugsource" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-29.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-devel" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-29.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-29.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debuginfo" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-29.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-static" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-29.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-tools" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-29.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libtiff-help" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-help-4.3.0-29.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debuginfo" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-29.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-tools" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-29.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-29.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-devel" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-29.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debugsource" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-29.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-static" release="29.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-29.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1436</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-1295" id="CVE-2023-1295" title="CVE-2023-1295" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3090" id="CVE-2023-3090" title="CVE-2023-3090" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3117" id="CVE-2023-3117" title="CVE-2023-3117" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-31248" id="CVE-2023-31248" title="CVE-2023-31248" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3220" id="CVE-2023-3220" title="CVE-2023-3220" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3338" id="CVE-2023-3338" title="CVE-2023-3338" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3358" id="CVE-2023-3358" title="CVE-2023-3358" type="cve"></reference>
          </references>
          <description>A time-of-check to time-of-use issue exists in io_uring subsystem&#39;s IORING_OP_CLOSE operation in the Linux kernel&#39;s versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93.(CVE-2023-1295)A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.The out-of-bounds write is caused by missing skb-&gt;cb  initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.(CVE-2023-3090)A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace(CVE-2023-31248)An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.(CVE-2023-3220)A flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.(CVE-2023-3338)A null pointer dereference was found in the Linux kernel&#39;s Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.(CVE-2023-3358)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-debugsource" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.41.0.119.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.41.0.119.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.41.0.119.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1440</id>
          <title>An update for python-django is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-21"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-36053" id="CVE-2023-36053" title="CVE-2023-36053" type="cve"></reference>
          </references>
          <description>In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.(CVE-2023-36053)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python-django-help" release="5.oe2203sp1" version="3.2.12">
                         <filename>python-django-help-3.2.12-5.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-Django" release="5.oe2203sp1" version="3.2.12">
                         <filename>python3-Django-3.2.12-5.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1441</id>
          <title>An update for cjose is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-29"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-37464" id="CVE-2023-37464" title="CVE-2023-37464" type="cve"></reference>
          </references>
          <description>OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). The AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. The spec  says that a fixed length of 16 octets must be applied. Therefore this bug allows an attacker to provide a truncated Authentication Tag and to modify the JWE accordingly. Users should upgrade to a version &gt;= 0.6.2.2. Users unable to upgrade should avoid using AES GCM encryption and replace it with another encryption algorithm (e.g. AES CBC).(CVE-2023-37464)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="cjose-debuginfo" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-debuginfo-0.6.2.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cjose" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-0.6.2.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cjose-devel" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-devel-0.6.2.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cjose-debugsource" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-debugsource-0.6.2.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cjose-debuginfo" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-debuginfo-0.6.2.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cjose" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-0.6.2.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cjose-devel" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-devel-0.6.2.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="cjose-debugsource" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-debugsource-0.6.2.2-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cjose" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-0.6.2.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cjose-devel" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-devel-0.6.2.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cjose-debugsource" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-debugsource-0.6.2.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cjose-debuginfo" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-debuginfo-0.6.2.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cjose" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-0.6.2.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cjose-devel" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-devel-0.6.2.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cjose-debugsource" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-debugsource-0.6.2.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="cjose-debuginfo" release="1.oe2203sp1" version="0.6.2.2">
                         <filename>cjose-debuginfo-0.6.2.2-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1442</id>
          <title>An update for ImageMagick is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-29"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3428" id="CVE-2023-3428" title="CVE-2023-3428" type="cve"></reference>
          </references>
          <description>A vulnerability was found in ImageMagick &lt;=7.1.1, where heap-based buffer overflow was found in coders/tiff.c.References:https://github.com/ImageMagick/ImageMagick/commit/a531d28e31309676ce8168c3b6dbbb5374b78790(CVE-2023-3428)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debugsource" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-devel" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-help" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-c++-devel" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-perl" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="ImageMagick-debuginfo" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debuginfo" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debuginfo-7.1.1.8-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-7.1.1.8-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-help" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-help-7.1.1.8-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-devel" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-devel-7.1.1.8-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-perl" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-perl-7.1.1.8-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++-devel" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-devel-7.1.1.8-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-c++" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-c++-7.1.1.8-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="ImageMagick-debugsource" release="4.oe2203sp1" version="7.1.1.8">
                         <filename>ImageMagick-debugsource-7.1.1.8-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1443</id>
          <title>An update for curl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-07-29"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32001" id="CVE-2023-32001" title="CVE-2023-32001" type="cve"></reference>
          </references>
          <description>libcurl can be told to save cookie, HSTS and/or alt-svc data to files. Whendoing this, it called `stat()` followed by `fopen()` in a way that made itvulnerable to a TOCTOU race condition problem.By exploiting this flaw, an attacker could trick the victim to create oroverwrite protected files holding this data in ways it was not intended to.(CVE-2023-32001)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="curl" release="23.oe2203sp1" version="7.79.1">
                         <filename>curl-7.79.1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl-debuginfo" release="23.oe2203sp1" version="7.79.1">
                         <filename>curl-debuginfo-7.79.1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libcurl-devel" release="23.oe2203sp1" version="7.79.1">
                         <filename>libcurl-devel-7.79.1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="curl-debugsource" release="23.oe2203sp1" version="7.79.1">
                         <filename>curl-debugsource-7.79.1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libcurl" release="23.oe2203sp1" version="7.79.1">
                         <filename>libcurl-7.79.1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="curl-help" release="23.oe2203sp1" version="7.79.1">
                         <filename>curl-help-7.79.1-23.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcurl-devel" release="23.oe2203sp1" version="7.79.1">
                         <filename>libcurl-devel-7.79.1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl-debugsource" release="23.oe2203sp1" version="7.79.1">
                         <filename>curl-debugsource-7.79.1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl-debuginfo" release="23.oe2203sp1" version="7.79.1">
                         <filename>curl-debuginfo-7.79.1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="curl" release="23.oe2203sp1" version="7.79.1">
                         <filename>curl-7.79.1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libcurl" release="23.oe2203sp1" version="7.79.1">
                         <filename>libcurl-7.79.1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1448</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-29"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-45886" id="CVE-2022-45886" title="CVE-2022-45886" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3390" id="CVE-2023-3390" title="CVE-2023-3390" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-35001" id="CVE-2023-35001" title="CVE-2023-35001" type="cve"></reference>
          </references>
          <description>An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free.(CVE-2022-45886)A use-after-free vulnerability was found in the Linux kernel&#39;s netfilter subsystem in net/netfilter/nf_tables_api.c.Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97.(CVE-2023-3390)Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace(CVE-2023-35001)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-tools" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.42.0.120.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.42.0.120.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.42.0.120.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1452</id>
          <title>An update for samba is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-29"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-2127" id="CVE-2022-2127" title="CVE-2022-2127" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3347" id="CVE-2023-3347" title="CVE-2023-3347" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34966" id="CVE-2023-34966" title="CVE-2023-34966" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-34967" id="CVE-2023-34967" title="CVE-2023-34967" type="cve"></reference>
          </references>
          <description>An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.(CVE-2022-2127)A vulnerability was found in Samba&#39;s SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured &#34;server signing = required&#34; or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.(CVE-2023-3347)An infinite loop vulnerability was found in Samba&#39;s mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains the count of elements in an array-like structure. By passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a denial of service condition.(CVE-2023-34966)A Type Confusion vulnerability was found in Samba&#39;s mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker process, affecting all other clients this worker serves.(CVE-2023-34967)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="samba-common" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-common-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-debugsource" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-debugsource-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-modules" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-modules-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libsmbclient-devel" release="6.oe2203sp1" version="4.17.5">
                         <filename>libsmbclient-devel-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-libs" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-libs-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-debuginfo" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-debuginfo-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-client" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-client-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-devel" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-devel-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-bind-dlz" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-bind-dlz-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba-dc" release="6.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-dc-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba" release="6.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-clients" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-clients-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-provision" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-provision-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-krb5-printing" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-krb5-printing-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-client-libs" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-client-libs-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-help" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-help-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-test" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-test-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="ctdb" release="6.oe2203sp1" version="4.17.5">
                         <filename>ctdb-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-common-tools" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-common-tools-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-usershares" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-usershares-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libsmbclient" release="6.oe2203sp1" version="4.17.5">
                         <filename>libsmbclient-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-samba-test" release="6.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-test-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-dc-libs" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-libs-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="samba-winbind-krb5-locator" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-krb5-locator-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwbclient-devel" release="6.oe2203sp1" version="4.17.5">
                         <filename>libwbclient-devel-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libwbclient" release="6.oe2203sp1" version="4.17.5">
                         <filename>libwbclient-4.17.5-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="samba-pidl" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-pidl-4.17.5-6.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-modules" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-modules-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba-dc" release="6.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-dc-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="ctdb" release="6.oe2203sp1" version="4.17.5">
                         <filename>ctdb-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-vfs-glusterfs" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-vfs-glusterfs-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwbclient-devel" release="6.oe2203sp1" version="4.17.5">
                         <filename>libwbclient-devel-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-libs" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-libs-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libsmbclient" release="6.oe2203sp1" version="4.17.5">
                         <filename>libsmbclient-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-libs" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-libs-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba" release="6.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-client" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-client-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-client-libs" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-client-libs-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-common-tools" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-common-tools-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-krb5-printing" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-krb5-printing-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-bind-dlz" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-bind-dlz-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libwbclient" release="6.oe2203sp1" version="4.17.5">
                         <filename>libwbclient-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-common" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-common-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-debugsource" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-debugsource-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-dc-provision" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-dc-provision-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libsmbclient-devel" release="6.oe2203sp1" version="4.17.5">
                         <filename>libsmbclient-devel-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-devel" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-devel-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-usershares" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-usershares-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-clients" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-clients-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-help" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-help-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-test" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-test-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-debuginfo" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-debuginfo-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="samba-winbind-krb5-locator" release="6.oe2203sp1" version="4.17.5">
                         <filename>samba-winbind-krb5-locator-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-samba-test" release="6.oe2203sp1" version="4.17.5">
                         <filename>python3-samba-test-4.17.5-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1456</id>
          <title>An update for python-reportlab is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-07-29"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-33733" id="CVE-2023-33733" title="CVE-2023-33733" type="cve"></reference>
          </references>
          <description>Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.(CVE-2023-33733)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python3-reportlab" release="2.oe2203sp1" version="3.6.10">
                         <filename>python3-reportlab-3.6.10-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python-reportlab-debugsource" release="2.oe2203sp1" version="3.6.10">
                         <filename>python-reportlab-debugsource-3.6.10-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python-reportlab-debuginfo" release="2.oe2203sp1" version="3.6.10">
                         <filename>python-reportlab-debuginfo-3.6.10-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="python-reportlab-help" release="2.oe2203sp1" version="3.6.10">
                         <filename>python-reportlab-help-3.6.10-2.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-reportlab" release="2.oe2203sp1" version="3.6.10">
                         <filename>python3-reportlab-3.6.10-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-reportlab-debuginfo" release="2.oe2203sp1" version="3.6.10">
                         <filename>python-reportlab-debuginfo-3.6.10-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python-reportlab-debugsource" release="2.oe2203sp1" version="3.6.10">
                         <filename>python-reportlab-debugsource-3.6.10-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1457</id>
          <title>An update for python-certifi is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-23491" id="CVE-2022-23491" title="CVE-2022-23491" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-37920" id="CVE-2023-37920" title="CVE-2023-37920" type="cve"></reference>
          </references>
          <description>Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from &#34;TrustCor&#34; from the root store. These are in the process of being removed from Mozilla&#39;s trust store. TrustCor&#39;s root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor&#39;s ownership also operated a business that produced spyware. Conclusions of Mozilla&#39;s investigation can be found in the linked google group discussion.(CVE-2022-23491)Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes &#34;e-Tugra&#34; root certificates. e-Tugra&#39;s root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from &#34;e-Tugra&#34; from the root store.(CVE-2023-37920)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python3-certifi" release="1.oe2203sp1" version="2023.7.22">
                         <filename>python3-certifi-2023.7.22-1.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python-certifi-help" release="1.oe2203sp1" version="2023.7.22">
                         <filename>python-certifi-help-2023.7.22-1.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1458</id>
          <title>An update for redis is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-24834" id="CVE-2022-24834" title="CVE-2022-24834" type="cve"></reference>
          </references>
          <description>Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.(CVE-2022-24834)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="redis-debuginfo" release="6.oe2203sp1" version="4.0.14">
                         <filename>redis-debuginfo-4.0.14-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="redis-debugsource" release="6.oe2203sp1" version="4.0.14">
                         <filename>redis-debugsource-4.0.14-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="redis" release="6.oe2203sp1" version="4.0.14">
                         <filename>redis-4.0.14-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="redis-debugsource" release="6.oe2203sp1" version="4.0.14">
                         <filename>redis-debugsource-4.0.14-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="redis" release="6.oe2203sp1" version="4.0.14">
                         <filename>redis-4.0.14-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="redis-debuginfo" release="6.oe2203sp1" version="4.0.14">
                         <filename>redis-debuginfo-4.0.14-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1462</id>
          <title>An update for libtiff is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Low</severity>
          <release>openEuler</release>
          <issued date="2023-08-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-38288" id="CVE-2023-38288" title="CVE-2023-38288" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-38289" id="CVE-2023-38289" title="CVE-2023-38289" type="cve"></reference>
          </references>
          <description>Multiple potential integer overflow in raw2tiff.c in libtiff &lt;= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38288)Multiple potential integer overflow in tiffcp.c in libtiff &lt;= 4.5.1 can allow remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow.(CVE-2023-38289)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libtiff-static" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-30.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-30.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-devel" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-30.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debugsource" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-30.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-tools" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-30.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debuginfo" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-30.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libtiff-help" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-help-4.3.0-30.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-devel" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-30.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debugsource" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-30.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-static" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-30.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-tools" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-30.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debuginfo" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-30.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff" release="30.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-30.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1466</id>
          <title>An update for openssl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3446" id="CVE-2023-3446" title="CVE-2023-3446" type="cve"></reference>
          </references>
          <description>Issue summary: Checking excessively long DH keys or parameters may be very slow.Impact summary: Applications that use the functions DH_check(), DH_check_ex()or EVP_PKEY_param_check() to check a DH key or DH parameters may experience longdelays. Where the key or parameters that are being checked have been obtainedfrom an untrusted source this may lead to a Denial of Service.The function DH_check() performs various checks on DH parameters. One of thosechecks confirms that the modulus (&#39;p&#39; parameter) is not too large. Trying to usea very large modulus is slow and OpenSSL will not normally use a modulus whichis over 10,000 bits in length.However the DH_check() function checks numerous aspects of the key or parametersthat have been supplied. Some of those checks use the supplied modulus valueeven if it has already been found to be too large.An application that calls DH_check() and supplies a key or parameters obtainedfrom an untrusted source could be vulernable to a Denial of Service attack.The function DH_check() is itself called by a number of other OpenSSL functions.An application calling any of those other functions may similarly be affected.The other functions affected by this are DH_check_ex() andEVP_PKEY_param_check().Also vulnerable are the OpenSSL dhparam and pkeyparam command line applicationswhen using the &#39;-check&#39; option.The OpenSSL SSL/TLS implementation is not affected by this issue.The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.(CVE-2023-3446)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="openssl-perl" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-devel" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-debugsource" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-debuginfo" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-libs" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-24.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="openssl-help" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-help-1.1.1m-24.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-libs" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-devel" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debugsource" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debuginfo" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-perl" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl" release="24.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-24.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1467</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-08-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-21255" id="CVE-2023-21255" title="CVE-2023-21255" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2163" id="CVE-2023-2163" title="CVE-2023-2163" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32248" id="CVE-2023-32248" title="CVE-2023-32248" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-32255" id="CVE-2023-32255" title="CVE-2023-32255" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3567" id="CVE-2023-3567" title="CVE-2023-3567" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3609" id="CVE-2023-3609" title="CVE-2023-3609" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3610" id="CVE-2023-3610" title="CVE-2023-3610" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3611" id="CVE-2023-3611" title="CVE-2023-3611" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3776" id="CVE-2023-3776" title="CVE-2023-3776" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-38426" id="CVE-2023-38426" title="CVE-2023-38426" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-38428" id="CVE-2023-38428" title="CVE-2023-38428" type="cve"></reference>
          </references>
          <description>In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.(CVE-2023-21255)(CVE-2023-2163)A flaw was found in the Linux kernel&#39;s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.(CVE-2023-32248)VUL-0: CVE-2023-32255: kernel: Linux Kernel ksmbd Session Setup Memory Leak Denial-of-Service Vulnerability(CVE-2023-32255)A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This flaw allows an attacker with local user access to cause a system crash or leak internal kernel information.(CVE-2023-3567)A use-after-free vulnerability in the Linux kernel&#39;s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.(CVE-2023-3609)A use-after-free vulnerability in the Linux kernel&#39;s netfilter: nf_tables component can be exploited to achieve local privilege escalation.Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.(CVE-2023-3610)An out-of-bounds write vulnerability in the Linux kernel&#39;s net/sched: sch_qfq component can be exploited to achieve local privilege escalation.The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.(CVE-2023-3611)A use-after-free vulnerability in the Linux kernel&#39;s net/sched: cls_fw component can be exploited to achieve local privilege escalation.If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.(CVE-2023-3776)An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context&#39;s name_len is larger than the tag length.(CVE-2023-38426)An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.(CVE-2023-38428)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-tools" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.43.0.121.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.43.0.121.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.43.0.121.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1475</id>
          <title>An update for qemu is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-0664" id="CVE-2023-0664" title="CVE-2023-0664" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2861" id="CVE-2023-2861" title="CVE-2023-2861" type="cve"></reference>
          </references>
          <description>A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent&#39;s Windows installer via repair custom actions to elevate their privileges on the system.(CVE-2023-0664)A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.(CVE-2023-2861)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="10" arch="aarch64" name="qemu-block-curl" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-curl-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-img" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-img-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-guest-agent" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-guest-agent-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-block-rbd" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-rbd-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-system-x86_64" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-x86_64-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-hw-usb-host" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-hw-usb-host-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-block-ssh" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-ssh-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-system-aarch64" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-aarch64-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-debugsource" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-debugsource-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-system-arm" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-arm-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-debuginfo" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-debuginfo-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-system-riscv" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-riscv-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="aarch64" name="qemu-block-iscsi" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-iscsi-6.2.0-76.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="10" arch="noarch" name="qemu-help" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-help-6.2.0-76.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-debugsource" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-debugsource-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-debuginfo" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-debuginfo-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-block-curl" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-curl-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-system-arm" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-arm-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-hw-usb-host" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-hw-usb-host-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-seabios" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-seabios-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-system-x86_64" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-x86_64-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-system-riscv" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-riscv-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-system-aarch64" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-aarch64-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-guest-agent" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-guest-agent-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-img" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-img-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-block-rbd" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-rbd-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-block-iscsi" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-iscsi-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="10" arch="x86_64" name="qemu-block-ssh" release="76.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-ssh-6.2.0-76.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1478</id>
          <title>An update for python-pygments is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-40896" id="CVE-2022-40896" title="CVE-2022-40896" type="cve"></reference>
          </references>
          <description>A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.(CVE-2022-40896)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python3-pygments" release="4.oe2203sp1" version="2.10.0">
                         <filename>python3-pygments-2.10.0-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python-pygments-help" release="4.oe2203sp1" version="2.10.0">
                         <filename>python-pygments-help-2.10.0-4.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1480</id>
          <title>An update for openssh is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-38408" id="CVE-2023-38408" title="CVE-2023-38408" type="cve"></reference>
          </references>
          <description>The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.(CVE-2023-38408)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="openssh-server" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-server-8.8p1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-keycat" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-keycat-8.8p1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pam_ssh_agent_auth" release="4.23.oe2203sp1" version="0.10.4">
                         <filename>pam_ssh_agent_auth-0.10.4-4.23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-debuginfo" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-debuginfo-8.8p1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-askpass" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-askpass-8.8p1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-debugsource" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-debugsource-8.8p1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-8.8p1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="openssh-clients" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-clients-8.8p1-23.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="openssh-help" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-help-8.8p1-23.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pam_ssh_agent_auth" release="4.23.oe2203sp1" version="0.10.4">
                         <filename>pam_ssh_agent_auth-0.10.4-4.23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-clients" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-clients-8.8p1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-debuginfo" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-debuginfo-8.8p1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-keycat" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-keycat-8.8p1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-server" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-server-8.8p1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-debugsource" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-debugsource-8.8p1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh-askpass" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-askpass-8.8p1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="openssh" release="23.oe2203sp1" version="8.8p1">
                         <filename>openssh-8.8p1-23.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1481</id>
          <title>An update for openssl is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3817" id="CVE-2023-3817" title="CVE-2023-3817" type="cve"></reference>
          </references>
          <description>Issue summary: Checking excessively long DH keys or parameters may be very slow.Impact summary: Applications that use the functions DH_check(), DH_check_ex()or EVP_PKEY_param_check() to check a DH key or DH parameters may experience longdelays. Where the key or parameters that are being checked have been obtainedfrom an untrusted source this may lead to a Denial of Service.The function DH_check() performs various checks on DH parameters. After fixingCVE-2023-3446 it was discovered that a large q parameter value can also triggeran overly long computation during some of these checks. A correct q value,if present, cannot be larger than the modulus p parameter, thus it isunnecessary to perform these checks if q is larger than p.An application that calls DH_check() and supplies a key or parameters obtainedfrom an untrusted source could be vulnerable to a Denial of Service attack.The function DH_check() is itself called by a number of other OpenSSL functions.An application calling any of those other functions may similarly be affected.The other functions affected by this are DH_check_ex() andEVP_PKEY_param_check().Also vulnerable are the OpenSSL dhparam and pkeyparam command line applicationswhen using the &#34;-check&#34; option.The OpenSSL SSL/TLS implementation is not affected by this issue.The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.(CVE-2023-3817)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="openssl-libs" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-perl" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-debuginfo" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-debugsource" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="openssl-devel" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="noarch" name="openssl-help" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-help-1.1.1m-25.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debuginfo" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debuginfo-1.1.1m-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-debugsource" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-debugsource-1.1.1m-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-libs" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-libs-1.1.1m-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-perl" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-perl-1.1.1m-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl-devel" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-devel-1.1.1m-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="openssl" release="25.oe2203sp1" version="1.1.1m">
                         <filename>openssl-1.1.1m-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1482</id>
          <title>An update for pcre2 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-41409" id="CVE-2022-41409" title="CVE-2022-41409" type="cve"></reference>
          </references>
          <description>Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.(CVE-2022-41409)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="pcre2" release="9.oe2203sp1" version="10.39">
                         <filename>pcre2-10.39-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pcre2-debuginfo" release="9.oe2203sp1" version="10.39">
                         <filename>pcre2-debuginfo-10.39-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pcre2-debugsource" release="9.oe2203sp1" version="10.39">
                         <filename>pcre2-debugsource-10.39-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="pcre2-devel" release="9.oe2203sp1" version="10.39">
                         <filename>pcre2-devel-10.39-9.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="pcre2-help" release="9.oe2203sp1" version="10.39">
                         <filename>pcre2-help-10.39-9.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pcre2" release="9.oe2203sp1" version="10.39">
                         <filename>pcre2-10.39-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pcre2-debugsource" release="9.oe2203sp1" version="10.39">
                         <filename>pcre2-debugsource-10.39-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pcre2-devel" release="9.oe2203sp1" version="10.39">
                         <filename>pcre2-devel-10.39-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="pcre2-debuginfo" release="9.oe2203sp1" version="10.39">
                         <filename>pcre2-debuginfo-10.39-9.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1485</id>
          <title>An update for sqlite is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-36191" id="CVE-2023-36191" title="CVE-2023-36191" type="cve"></reference>
          </references>
          <description>sqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c.(CVE-2023-36191)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="sqlite" release="6.oe2203sp1" version="3.37.2">
                         <filename>sqlite-3.37.2-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sqlite-debugsource" release="6.oe2203sp1" version="3.37.2">
                         <filename>sqlite-debugsource-3.37.2-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sqlite-debuginfo" release="6.oe2203sp1" version="3.37.2">
                         <filename>sqlite-debuginfo-3.37.2-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="sqlite-devel" release="6.oe2203sp1" version="3.37.2">
                         <filename>sqlite-devel-3.37.2-6.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="sqlite-help" release="6.oe2203sp1" version="3.37.2">
                         <filename>sqlite-help-3.37.2-6.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sqlite-debugsource" release="6.oe2203sp1" version="3.37.2">
                         <filename>sqlite-debugsource-3.37.2-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sqlite-debuginfo" release="6.oe2203sp1" version="3.37.2">
                         <filename>sqlite-debuginfo-3.37.2-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sqlite" release="6.oe2203sp1" version="3.37.2">
                         <filename>sqlite-3.37.2-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="sqlite-devel" release="6.oe2203sp1" version="3.37.2">
                         <filename>sqlite-devel-3.37.2-6.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1488</id>
          <title>An update for wireshark is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3648" id="CVE-2023-3648" title="CVE-2023-3648" type="cve"></reference>
          </references>
          <description>Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file(CVE-2023-3648)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package epoch="1" arch="aarch64" name="wireshark-debuginfo" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debuginfo-3.6.14-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-devel" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-devel-3.6.14-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-debugsource" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debugsource-3.6.14-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark-help" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-help-3.6.14-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="aarch64" name="wireshark" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-3.6.14-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-help" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-help-3.6.14-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-devel" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-devel-3.6.14-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debuginfo" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debuginfo-3.6.14-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-3.6.14-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package epoch="1" arch="x86_64" name="wireshark-debugsource" release="2.oe2203sp1" version="3.6.14">
                         <filename>wireshark-debugsource-3.6.14-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1490</id>
          <title>An update for qt5-qtbase is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-24607" id="CVE-2023-24607" title="CVE-2023-24607" type="cve"></reference>
          </references>
          <description>Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.(CVE-2023-24607)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="qt5-qtbase-static" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-static-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase-private-devel" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-private-devel-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase-gui" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-gui-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase-mysql" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-mysql-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase-odbc" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-odbc-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase-debugsource" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-debugsource-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase-debuginfo" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-debuginfo-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase-postgresql" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-postgresql-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase-examples" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-examples-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qt5-qtbase-devel" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-devel-5.15.2-7.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="qt5-qtbase-common" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-common-5.15.2-7.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-static" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-static-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-examples" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-examples-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-devel" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-devel-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-gui" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-gui-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-postgresql" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-postgresql-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-mysql" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-mysql-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-debuginfo" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-debuginfo-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-odbc" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-odbc-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-private-devel" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-private-devel-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qt5-qtbase-debugsource" release="7.oe2203sp1" version="5.15.2">
                         <filename>qt5-qtbase-debugsource-5.15.2-7.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1491</id>
          <title>An update for scipy is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25399" id="CVE-2023-25399" title="CVE-2023-25399" type="cve"></reference>
          </references>
          <description>A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.(CVE-2023-25399)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python3-scipy" release="2.oe2203sp1" version="1.6.2">
                         <filename>python3-scipy-1.6.2-2.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-scipy" release="2.oe2203sp1" version="1.6.2">
                         <filename>python3-scipy-1.6.2-2.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1492</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-38427" id="CVE-2023-38427" title="CVE-2023-38427" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-38429" id="CVE-2023-38429" title="CVE-2023-38429" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-38430" id="CVE-2023-38430" title="CVE-2023-38430" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-4004" id="CVE-2023-4004" title="CVE-2023-4004" type="cve"></reference>
          </references>
          <description>An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.(CVE-2023-38427)An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.(CVE-2023-38429)An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.(CVE-2023-38430)A use-after-free flaw was found in the Linux kernel&#39;s netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.(CVE-2023-4004)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="bpftool" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.44.0.122.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.44.0.122.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.44.0.122.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1497</id>
          <title>An update for iperf3 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-38403" id="CVE-2023-38403" title="CVE-2023-38403" type="cve"></reference>
          </references>
          <description>iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.(CVE-2023-38403)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="iperf3-debuginfo" release="3.oe2203sp1" version="3.10.1">
                         <filename>iperf3-debuginfo-3.10.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="iperf3" release="3.oe2203sp1" version="3.10.1">
                         <filename>iperf3-3.10.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="iperf3-devel" release="3.oe2203sp1" version="3.10.1">
                         <filename>iperf3-devel-3.10.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="iperf3-debugsource" release="3.oe2203sp1" version="3.10.1">
                         <filename>iperf3-debugsource-3.10.1-3.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="iperf3-help" release="3.oe2203sp1" version="3.10.1">
                         <filename>iperf3-help-3.10.1-3.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="iperf3-debuginfo" release="3.oe2203sp1" version="3.10.1">
                         <filename>iperf3-debuginfo-3.10.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="iperf3-devel" release="3.oe2203sp1" version="3.10.1">
                         <filename>iperf3-devel-3.10.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="iperf3" release="3.oe2203sp1" version="3.10.1">
                         <filename>iperf3-3.10.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="iperf3-debugsource" release="3.oe2203sp1" version="3.10.1">
                         <filename>iperf3-debugsource-3.10.1-3.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1498</id>
          <title>An update for golang is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-29406" id="CVE-2023-29406" title="CVE-2023-29406" type="cve"></reference>
          </references>
          <description>The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.(CVE-2023-29406)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="golang" release="20.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-20.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-help" release="20.oe2203sp1" version="1.17.3">
                         <filename>golang-help-1.17.3-20.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="golang-devel" release="20.oe2203sp1" version="1.17.3">
                         <filename>golang-devel-1.17.3-20.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="golang" release="20.oe2203sp1" version="1.17.3">
                         <filename>golang-1.17.3-20.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1506</id>
          <title>An update for nghttp2 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-35945" id="CVE-2023-35945" title="CVE-2023-35945" type="cve"></reference>
          </references>
          <description>Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY` frame skips de-allocation of the bookkeeping structure and pending compressed header. The error return [code path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame. The clean-up code is right after the return statement, causing memory leak. Denial of service through memory exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.(CVE-2023-35945)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="nghttp2" release="4.oe2203sp1" version="1.46.0">
                         <filename>nghttp2-1.46.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="nghttp2-debugsource" release="4.oe2203sp1" version="1.46.0">
                         <filename>nghttp2-debugsource-1.46.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libnghttp2-devel" release="4.oe2203sp1" version="1.46.0">
                         <filename>libnghttp2-devel-1.46.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="nghttp2-debuginfo" release="4.oe2203sp1" version="1.46.0">
                         <filename>nghttp2-debuginfo-1.46.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libnghttp2" release="4.oe2203sp1" version="1.46.0">
                         <filename>libnghttp2-1.46.0-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="nghttp2-help" release="4.oe2203sp1" version="1.46.0">
                         <filename>nghttp2-help-1.46.0-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="nghttp2-debuginfo" release="4.oe2203sp1" version="1.46.0">
                         <filename>nghttp2-debuginfo-1.46.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="nghttp2-debugsource" release="4.oe2203sp1" version="1.46.0">
                         <filename>nghttp2-debugsource-1.46.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="nghttp2" release="4.oe2203sp1" version="1.46.0">
                         <filename>nghttp2-1.46.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libnghttp2" release="4.oe2203sp1" version="1.46.0">
                         <filename>libnghttp2-1.46.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libnghttp2-devel" release="4.oe2203sp1" version="1.46.0">
                         <filename>libnghttp2-devel-1.46.0-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1507</id>
          <title>An update for amanda is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-18"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-30577" id="CVE-2023-30577" title="CVE-2023-30577" type="cve"></reference>
          </references>
          <description>AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.(CVE-2023-30577)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="amanda" release="1.oe2203sp1" version="3.5.4">
                         <filename>amanda-3.5.4-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="amanda-debuginfo" release="1.oe2203sp1" version="3.5.4">
                         <filename>amanda-debuginfo-3.5.4-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="amanda-debugsource" release="1.oe2203sp1" version="3.5.4">
                         <filename>amanda-debugsource-3.5.4-1.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="amanda-help" release="1.oe2203sp1" version="3.5.4">
                         <filename>amanda-help-3.5.4-1.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="amanda-debuginfo" release="1.oe2203sp1" version="3.5.4">
                         <filename>amanda-debuginfo-3.5.4-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="amanda-debugsource" release="1.oe2203sp1" version="3.5.4">
                         <filename>amanda-debugsource-3.5.4-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="amanda" release="1.oe2203sp1" version="3.5.4">
                         <filename>amanda-3.5.4-1.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1508</id>
          <title>An update for yasm is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-18"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-37732" id="CVE-2023-37732" title="CVE-2023-37732" type="cve"></reference>
          </references>
          <description>Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.(CVE-2023-37732)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="yasm" release="11.oe2203sp1" version="1.3.0">
                         <filename>yasm-1.3.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="yasm-debuginfo" release="11.oe2203sp1" version="1.3.0">
                         <filename>yasm-debuginfo-1.3.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="yasm-devel" release="11.oe2203sp1" version="1.3.0">
                         <filename>yasm-devel-1.3.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="yasm-debugsource" release="11.oe2203sp1" version="1.3.0">
                         <filename>yasm-debugsource-1.3.0-11.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="yasm-help" release="11.oe2203sp1" version="1.3.0">
                         <filename>yasm-help-1.3.0-11.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="yasm" release="11.oe2203sp1" version="1.3.0">
                         <filename>yasm-1.3.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="yasm-devel" release="11.oe2203sp1" version="1.3.0">
                         <filename>yasm-devel-1.3.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="yasm-debuginfo" release="11.oe2203sp1" version="1.3.0">
                         <filename>yasm-debuginfo-1.3.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="yasm-debugsource" release="11.oe2203sp1" version="1.3.0">
                         <filename>yasm-debugsource-1.3.0-11.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1512</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-18"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3772" id="CVE-2023-3772" title="CVE-2023-3772" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3863" id="CVE-2023-3863" title="CVE-2023-3863" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-4133" id="CVE-2023-4133" title="CVE-2023-4133" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-4147" id="CVE-2023-4147" title="CVE-2023-4147" type="cve"></reference>
          </references>
          <description>A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.(CVE-2023-3772)A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.(CVE-2023-3863)A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.(CVE-2023-4133)A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.(CVE-2023-4147)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python3-perf" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.45.0.123.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.45.0.123.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.45.0.123.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1514</id>
          <title>An update for procps-ng is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-18"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-4016" id="CVE-2023-4016" title="CVE-2023-4016" type="cve"></reference>
          </references>
          <description>Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.(CVE-2023-4016)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="procps-ng" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-4.0.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="procps-ng-debugsource" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-debugsource-4.0.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="procps-ng-debuginfo" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-debuginfo-4.0.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="procps-ng-devel" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-devel-4.0.2-10.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="procps-ng-i18n" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-i18n-4.0.2-10.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="procps-ng-help" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-help-4.0.2-10.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="procps-ng-debuginfo" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-debuginfo-4.0.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="procps-ng-devel" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-devel-4.0.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="procps-ng" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-4.0.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="procps-ng-debugsource" release="10.oe2203sp1" version="4.0.2">
                         <filename>procps-ng-debugsource-4.0.2-10.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1515</id>
          <title>An update for python-werkzeug is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-18"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-23934" id="CVE-2023-23934" title="CVE-2023-23934" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-25577" id="CVE-2023-25577" title="CVE-2023-25577" type="cve"></reference>
          </references>
          <description>Werkzeug is a comprehensive WSGI web application library. Browsers may allow &#34;nameless&#34; cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like `=__Host-test=bad` for another subdomain. Werkzeug prior to 2.2.3 will parse the cookie `=__Host-test=bad` as __Host-test=bad`. If a Werkzeug application is running next to a vulnerable or malicious subdomain which sets such a cookie using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key. The issue is fixed in Werkzeug 2.2.3.(CVE-2023-23934)Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug&#39;s multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to parse and may use more memory as Python data. If a request can be made to an endpoint that accesses `request.data`, `request.form`, `request.files`, or `request.get_data(parse_form_data=False)`, it can cause unexpectedly high resource usage. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. The amount of RAM required can trigger an out of memory kill of the process. Unlimited file parts can use up memory and file handles. If many concurrent requests are sent continuously, this can exhaust or kill all available workers. Version 2.2.3 contains a patch for this issue.(CVE-2023-25577)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python-werkzeug-help" release="4.oe2203sp1" version="2.0.3">
                         <filename>python-werkzeug-help-2.0.3-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-werkzeug" release="4.oe2203sp1" version="2.0.3">
                         <filename>python3-werkzeug-2.0.3-4.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1519</id>
          <title>An update for python3 is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-18"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2007-4559" id="CVE-2007-4559" title="CVE-2007-4559" type="cve"></reference>
          </references>
          <description>Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.(CVE-2007-4559)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="python3-debugsource" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-debugsource-3.9.9-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-unversioned-command" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-unversioned-command-3.9.9-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-devel" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-devel-3.9.9-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-3.9.9-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-debuginfo" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-debuginfo-3.9.9-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-debug" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-debug-3.9.9-25.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-help" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-help-3.9.9-25.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-debugsource" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-debugsource-3.9.9-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-debug" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-debug-3.9.9-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-3.9.9-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-unversioned-command" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-unversioned-command-3.9.9-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-debuginfo" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-debuginfo-3.9.9-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-devel" release="25.oe2203sp1" version="3.9.9">
                         <filename>python3-devel-3.9.9-25.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1524</id>
          <title>An update for qemu is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3180" id="CVE-2023-3180" title="CVE-2023-3180" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3301" id="CVE-2023-3301" title="CVE-2023-3301" type="cve"></reference>
          </references>
          <description>A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.(CVE-2023-3180)The async nature of the hot-unplug enables an easy to reproduce race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged (or the ACPI unplug has been acked by the guest?). The guest can use this time window to, at least, trigger an assertion.(CVE-2023-3301)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="qemu-block-ssh" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-ssh-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-guest-agent" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-guest-agent-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-block-iscsi" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-iscsi-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-debuginfo" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-debuginfo-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-system-arm" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-arm-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-block-curl" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-curl-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-hw-usb-host" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-hw-usb-host-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-debugsource" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-debugsource-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-system-x86_64" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-x86_64-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-img" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-img-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-block-rbd" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-rbd-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-system-aarch64" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-aarch64-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qemu-system-riscv" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-riscv-6.2.0-78.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="qemu-help" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-help-6.2.0-78.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-debugsource" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-debugsource-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-system-aarch64" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-aarch64-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-debuginfo" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-debuginfo-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-seabios" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-seabios-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-block-curl" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-curl-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-system-riscv" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-riscv-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-img" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-img-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-block-ssh" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-ssh-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-system-x86_64" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-x86_64-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-block-rbd" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-rbd-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-hw-usb-host" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-hw-usb-host-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-guest-agent" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-guest-agent-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-block-iscsi" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-block-iscsi-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qemu-system-arm" release="78.oe2203sp1" version="6.2.0">
                         <filename>qemu-system-arm-6.2.0-78.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1529</id>
          <title>An update for python-GitPython is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Critical</severity>
          <release>openEuler</release>
          <issued date="2023-08-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2022-24439" id="CVE-2022-24439" title="CVE-2022-24439" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-40267" id="CVE-2023-40267" title="CVE-2023-40267" type="cve"></reference>
          </references>
          <description>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.(CVE-2022-24439)GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.(CVE-2023-40267)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="noarch" name="python-GitPython-help" release="1.oe2203sp1" version="3.1.32">
                         <filename>python-GitPython-help-3.1.32-1.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="noarch" name="python3-GitPython" release="1.oe2203sp1" version="3.1.32">
                         <filename>python3-GitPython-3.1.32-1.oe2203sp1.noarch.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1534</id>
          <title>An update for libtiff is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Moderate</severity>
          <release>openEuler</release>
          <issued date="2023-08-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-3618" id="CVE-2023-3618" title="CVE-2023-3618" type="cve"></reference>
          </references>
          <description>A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.(CVE-2023-3618)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="libtiff-tools" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-31.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-static" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-31.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-31.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debugsource" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-31.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-debuginfo" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-31.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="libtiff-devel" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-31.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="libtiff-help" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-help-4.3.0-31.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debugsource" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debugsource-4.3.0-31.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-devel" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-devel-4.3.0-31.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-4.3.0-31.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-static" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-static-4.3.0-31.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-tools" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-tools-4.3.0-31.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="libtiff-debuginfo" release="31.oe2203sp1" version="4.3.0">
                         <filename>libtiff-debuginfo-4.3.0-31.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1539</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-2860" id="CVE-2023-2860" title="CVE-2023-2860" type="cve"></reference>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-4128" id="CVE-2023-4128" title="CVE-2023-4128" type="cve"></reference>
          </references>
          <description>An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.(CVE-2023-2860)A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue.(CVE-2023-4128)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="kernel-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-devel" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="perf" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-debugsource" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-source" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-headers" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-tools" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="kernel-devel" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="python3-perf-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="bpftool-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.46.0.124.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-devel" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-devel-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-debuginfo-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>perf-debuginfo-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-tools-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-tools-debuginfo-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debugsource" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-debugsource-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="python3-perf" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>python3-perf-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-headers" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-headers-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>bpftool-debuginfo-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-debuginfo" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-debuginfo-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-source" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-source-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="bpftool" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>bpftool-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="kernel-devel" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>kernel-devel-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="perf" release="136.46.0.124.oe2203sp1" version="5.10.0">
                         <filename>perf-5.10.0-136.46.0.124.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1541</id>
          <title>An update for haproxy is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-40225" id="CVE-2023-40225" title="CVE-2023-40225" type="cve"></reference>
          </references>
          <description>HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.(CVE-2023-40225)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="haproxy" release="4.oe2203sp1" version="2.6.6">
                         <filename>haproxy-2.6.6-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="haproxy-debugsource" release="4.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debugsource-2.6.6-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="haproxy-debuginfo" release="4.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debuginfo-2.6.6-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="haproxy-help" release="4.oe2203sp1" version="2.6.6">
                         <filename>haproxy-help-2.6.6-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="haproxy-debugsource" release="4.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debugsource-2.6.6-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="haproxy" release="4.oe2203sp1" version="2.6.6">
                         <filename>haproxy-2.6.6-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="haproxy-debuginfo" release="4.oe2203sp1" version="2.6.6">
                         <filename>haproxy-debuginfo-2.6.6-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-SA-2023-1542</id>
          <title>An update for qpdf is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2023-08-26"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-25786" id="CVE-2021-25786" title="CVE-2021-25786" type="cve"></reference>
          </references>
          <description>An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write parameter in libqpdf.(CVE-2021-25786)</description>
          <pkglist>
               <collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="qpdf-debuginfo" release="4.oe2203sp1" version="8.4.2">
                         <filename>qpdf-debuginfo-8.4.2-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qpdf" release="4.oe2203sp1" version="8.4.2">
                         <filename>qpdf-8.4.2-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qpdf-devel" release="4.oe2203sp1" version="8.4.2">
                         <filename>qpdf-devel-8.4.2-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="aarch64" name="qpdf-debugsource" release="4.oe2203sp1" version="8.4.2">
                         <filename>qpdf-debugsource-8.4.2-4.oe2203sp1.aarch64.rpm</filename>
                    </package>
                    <package arch="noarch" name="qpdf-help" release="4.oe2203sp1" version="8.4.2">
                         <filename>qpdf-help-8.4.2-4.oe2203sp1.noarch.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qpdf-debugsource" release="4.oe2203sp1" version="8.4.2">
                         <filename>qpdf-debugsource-8.4.2-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qpdf" release="4.oe2203sp1" version="8.4.2">
                         <filename>qpdf-8.4.2-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qpdf-debuginfo" release="4.oe2203sp1" version="8.4.2">
                         <filename>qpdf-debuginfo-8.4.2-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="qpdf-devel" release="4.oe2203sp1" version="8.4.2">
                         <filename>qpdf-devel-8.4.2-4.oe2203sp1.x86_64.rpm</filename>
                    </package>
               </collection>
          </pkglist>
     </update>
</updates>