未验证 提交 62e42fe4 编写于 作者: M mamingshuai 提交者: Gitee

!30 新增2023年05月安全公告

Merge pull request !30 from wangchen/0509_s
## Security Vulnerabilities in May 2023
_published May 9,2023_<br/>
_updated May 9,2023_
### The following table lists the third-party library vulnerabilities with only the CVE, severity, and affected OpenHarmony versions provided. For more details, see the security bulletins released by third-parties.
| CVE | severity | CVSS3.1 | affected repository |affected OpenHarmony versions | fix link |
| --- | -------- | ------- | --------------------| ---------------------------- | -------- |
| CVE-2021-36647 | Medium | 4.7 |third_party_mbedtls<br/>device_hisilicon_hispark_taurus| OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.0.x](https://gitee.com/openharmony/third_party_mbedtls/pulls/86)<br/>[3.0.x](https://gitee.com/openharmony/device_hisilicon_hispark_taurus/pulls/129) |
| CVE-2023-1382 | Medium | 5.5 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/804)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/805) |
| CVE-2023-0386 | Medium | 5.3 |kernel_linux_4.19| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/119)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/120) |
| CVE-2023-1281 | High | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-28772 | High | 7.8 |kernel_linux_4.19| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/119)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/120) |
| CVE-2023-1637 | Low | 3.3 |kernel_linux_4.19| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/119)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/120) |
| CVE-2021-3923 | Low | 3.3 |kernel_linux_4.19| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/119)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/120) |
| CVE-2023-1380 | High | 7.1 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-1582 | Medium | 4.7 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/765)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/766) |
| CVE-2022-48434 | High | 8.1 |third_party_ffmpeg| OpenHarmony-v3.2-Release<br/>OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.2.x](https://gitee.com/openharmony/third_party_ffmpeg/pulls/81)<br/>[3.1.x](https://gitee.com/openharmony/third_party_ffmpeg/pulls/82)<br/>[3.0.x](https://gitee.com/openharmony/third_party_ffmpeg/pulls/83) |
| CVE-2023-1838 | Medium | 5.3 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/773)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/774) |
| CVE-2023-1838 | Medium | 5.3 |kernel_linux_4.19| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/124)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/125) |
| CVE-2023-1855 | Medium | 6.3 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-30456 | High | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2022-45934 | High | 7.8 |kernel_linux_4.19| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/129)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/130) |
| CVE-2022-2978 | High | 7.8 |kernel_linux_4.19| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/121)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/122) |
| CVE-2022-29581 | High | 7.8 |kernel_linux_4.19| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/124)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/125) |
| CVE-2023-1989 | High | 7.0 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-1829 | High | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-1990 | Medium | 4.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-1859 | Medium | 6.4 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-2004 | Medium | 5.3 |third_party_freetype| OpenHarmony-v3.2-Release<br/>OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.2.x](https://gitee.com/openharmony/third_party_freetype/pulls/51)<br/>[3.1.x](https://gitee.com/openharmony/third_party_freetype/pulls/52)<br/>[3.0.x](https://gitee.com/openharmony/third_party_freetype/pulls/53) |
| CVE-2023-2006 | High | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/811)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/812) |
| CVE-2023-2008 | High | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release through OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0 through OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/787)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/788) |
\ No newline at end of file
......@@ -2,7 +2,8 @@
This document describes the security vulnerabilities of OpenHarmony.
## Security Vulnerabilities in 2023
**[Security Vulnerabilities in March](https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-04.md)**
**[Security Vulnerabilities in May](https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-05.md)**
**[Security Vulnerabilities in April](https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-04.md)**
**[Security Vulnerabilities in March](https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md)**
**[Security Vulnerabilities in Feburary](https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md)**
**[Security Vulnerabilities in January](https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md)**
......
## 2023年05月安全漏洞
_发布于2023.05.09_<br/>
_最后更新于2023.05.09_
### 以下为三方库漏洞,只提供CVE、严重程度、受影响的OpenHarmony版本,详细信息请参考三方公告。
| CVE | 严重程度 | CVSS 3.1得分 |受影响的仓库 | 受影响的OpenHarmony版本 | 修复链接 |
| -------------- | -------- | ------------ |-------------| ------------------------------------------------------------ | ------------------------------------------------------------ |
| CVE-2021-36647 | 中 | 4.7 |third_party_mbedtls<br/>device_hisilicon_hispark_taurus| OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.0.x](https://gitee.com/openharmony/third_party_mbedtls/pulls/86)<br/>[3.0.x](https://gitee.com/openharmony/device_hisilicon_hispark_taurus/pulls/129) |
| CVE-2023-1382 | 中 | 5.5 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/804)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/805) |
| CVE-2023-0386 | 中 | 5.3 |kernel_linux_4.19| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/119)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/120) |
| CVE-2023-1281 | 高 | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-28772 | 高 | 7.8 |kernel_linux_4.19| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/119)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/120) |
| CVE-2023-1637 | 低 | 3.3 |kernel_linux_4.19| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/119)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/120) |
| CVE-2021-3923 | 低 | 3.3 |kernel_linux_4.19| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/119)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/120) |
| CVE-2023-1380 | 高 | 7.1 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-1582 | 中 | 4.7 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/765)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/766) |
| CVE-2022-48434 | 高 | 8.1 |third_party_ffmpeg| OpenHarmony-v3.2-Release<br/>OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.2.x](https://gitee.com/openharmony/third_party_ffmpeg/pulls/81)<br/>[3.1.x](https://gitee.com/openharmony/third_party_ffmpeg/pulls/82)<br/>[3.0.x](https://gitee.com/openharmony/third_party_ffmpeg/pulls/83) |
| CVE-2023-1838 | 中 | 5.3 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/773)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/774) |
| CVE-2023-1838 | 中 | 5.3 |kernel_linux_4.19| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/124)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/125) |
| CVE-2023-1855 | 中 | 6.3 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-30456 | 高 | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2022-45934 | 高 | 7.8 |kernel_linux_4.19| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/129)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/130) |
| CVE-2022-2978 | 高 | 7.8 |kernel_linux_4.19| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/121)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/122) |
| CVE-2022-29581 | 高 | 7.8 |kernel_linux_4.19| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/124)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_4.19/pulls/125) |
| CVE-2023-1989 | 高 | 7.0 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-1829 | 高 | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-1990 | 中 | 4.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-1859 | 中 | 6.4 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/802)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/803) |
| CVE-2023-2004 | 中 | 5.3 |third_party_freetype| OpenHarmony-v3.2-Release<br/>OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.2.x](https://gitee.com/openharmony/third_party_freetype/pulls/51)<br/>[3.1.x](https://gitee.com/openharmony/third_party_freetype/pulls/52)<br/>[3.0.x](https://gitee.com/openharmony/third_party_freetype/pulls/53) |
| CVE-2023-2006 | 高 | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/811)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/812) |
| CVE-2023-2008 | 高 | 7.8 |kernel_linux_5.10| OpenHarmony-v3.1-Release到OpenHarmony-v3.1.7-Release<br/>OpenHarmony-v3.0到OpenHarmony-v3.0.8 | [3.1.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/787)<br/>[3.0.x](https://gitee.com/openharmony/kernel_linux_5.10/pulls/788) |
\ No newline at end of file
......@@ -2,6 +2,7 @@
本文档主要发布OpenHarmony软件的安全漏洞公告。
## 2023年安全漏洞
**[2023年05月安全漏洞](https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-05.md)**
**[2023年04月安全漏洞](https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-04.md)**
**[2023年03月安全漏洞](https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-03.md)**
**[2023年02月安全漏洞](https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-02.md)**
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册