openEuler Monthly Bulletin – August
Welcome to the openEuler Monthly Bulletin – August, where we share the latest news and updates from the #openEuler community. As we move to the second half of the year, the openEuler community continues to make strides in advancing the development of this open source #OS. Sit back, let's dive into the latest happenings in the world of openEuler.
Community Scale
As of the end of August 2023, the openEuler community has achieved significant growth, with over 1.75 million users and 15,000 #developers actively contributing to the community. The community has generated a total of 127K PRs and 65.8K issues. Currently, the openEuler community has attracted over 1,000 corporate members, with 58 new members joining in August.
Community Highlights
openEuler will be attending Open Source Summit Europe 2023
Last September, openEuler made its official debut at the OSSUMMIT EU 2022, which was an important step for openEuler to go global. This September, openEuler will once again participate in the top #opensource summit #OSSUMMIT EU 2023. At this time, openEuler will showcase its latest achievements and invite experts to share their insights and experiences related to openEuler. We sincerely invite you to attend OSSUMMIT EU 2023?, and look forward to meeting you at booth D1. Let us witness and promote the development and innovation of #opensource together.
openEuler participated in the RISC-V Summit China
openEuler had significant participation this year at the third RISC-V Summit China, which was held in Beijing from August 23 to 25. At the Summit, Xi Jing, Head of the OERV Team at the Institute of Software, Chinese Academy of Sciences, introduced the current status and future development roadmap of openEuler's support for #RISCV. Yu Jiageng, Senior Engineer at the Institute of Software, Chinese Academy of Sciences, presented "AI Edge Computing Solution Based on openEuler Embedded". Currently, openEuler has joined the RISC-V Landscape, with four community editions that fully support RISC-V architecture, and has completed the adaptation of more than 6,000 software on RISC-V #architecture. We look forward to further collaborations in the future.
openEuler Technical Committee Member Wang Jianmin was invited to “Night of AI” online conference
In early August, AO.space, AGI Zaotalk, and KCC Singapore jointly held an online conference called "Night of AI". Wang Jianmin, a member of the openEuler Technical Committee, attended the event and shared how to use #AI to optimize operating system performance, as well as his experience in the A-Tune project.
?
The openEuler OS Technical White Paper – Innovation Projects is available now
openEuler has achieved remarkable progress in 2023, entering a phase of self-sustained and accelerated development. The openEuler OS Technical White Paper – Innovation Projects has been released, showcasing the diverse and vibrant technical ecosystem and the outstanding innovation projects. We encourage more projects to be included in the white paper, and we invite everyone to join us in building a healthy and collaborative community.
openEuler 22.03 LTS is available in AWS Marketplace
openEuler is now providing multiple versions of Amazon Machine Images (#AMIs) in various #AWS regions. openEuler images will be released by the official openEuler account in AWS Marketplace. We offer a range of image formats, with continuous updates and additions to cater to your needs. Currently, the supported image formats include:
For more information and a hands-on instruction, see Try openEuler: Multiple AMI Versions Now Available in AWS Marketplace.
openEuler officially joined the Ceph support matrix
openEuler is now part of the Ceph support matrix, which indicates that openEuler has completed technical adaptation to #Ceph ecosystem. We would like to express our gratitude to openEuler #SDS SIG, Linaro?, and developers who have contributed to this achievement, such as Zhao Shuai (GitHub@kevinzs2048), Liu Qinfei (GitHub@liuqinfei), Wang Xiyuan (GitHub@wangxiyuan), and many others.
Two members of the openEuler Compiler SIG have become OpenJDK Committers
The OpenJDK community has announced the results of the CFV: New JDK Committer nomination vote. Yadong Wang (GitHub@yadongw) and Feilong Jiang (GitHub@feilongjiang), who are members of the openEuler Compiler SIG, have been nominated and officially become #OpenJDK Committers. This means that they have been granted direct push access to the project's code repositories.
Community Governance
The openEuler Committee Meeting for 2023–2024 was held in Beijing
The openEuler Committee Meeting for 2023–2024 was held in Beijing. At the meeting, the openEuler Committee reviewed the progress and plans of the openEuler project group. The committee members also discussed and decided on the work of each ecosystem innovation center. The openEuler Technical Committee (TC) summarized the technical achievements and shared the technical roadmap for the second half of the year. The openEuler Brand Committee introduced the strategies for participating in events outside China.
The Message Middleware SIG was established
The openEuler TC has approved the establishment of the Message Middleware SIG, which will focus on exploring solutions to enhance the performance, security, and stability of #messagemiddleware based on openEuler's foundational software for open source users. The SIG will also incubate new projects related to messaging, such as multi-protocol message conversion components, message API standards, and message flow engines. The Message Middleware SIG welcomes anyone who is interested in joining.
openEuler kernel kconfig renovation and kernel package splitting proposal was approved
The openEuler TC has approved a proposal from xFusion, which aims to improve the openEuler #kernel kconfig and split the kernel package. The proposal will evaluate the #compilation configuration of the openEuler kernel and enable more hardware #driver modules. This will greatly improve the #compatibility of openEuler with various #hardware platforms, making it easier for developers and users to install, test, and use openEuler on different devices. The proposal will also split the openEuler #kernelpackage into minimum, basic, and extended packages, allowing users to choose according to their needs. The proposal is expected to be implemented in the openEuler 23.09 innovation version this year.
Technical Progress
Container Cloud Management Platform Solution (CCPS) was contributed to the openEuler community
UnionTech officially contributed its CCPS to the openEuler community on July 12, 2023. #CCPS is an enterprise-level container cloud #PaaS platform that is based on #Kubernetes, OKD, and CRI-O. It provides automatic scaling and O&M, as well as configuration and resource management. It also integrates with various infrastructures through a full-stack automated #DevOps workflow. This enables full lifecycle management of containerized applications.
Metalink accelerates software download by more than 20 times
The metalink service has been further optimized after debugging. The #metalink configuration option, which is added to the #DNF configuration file in openEuler 22.03 LTS SP2, will automatically select the optimal site for #software downloads. The test results below show that the metalink configuration option boosts download speeds significantly. In China, download speeds have increased by 20–30 times, while in Europe and North America, download speeds have increased by 50–100 times. openEuler will add metalink configuration options to more versions in the future to ensure that users can download software from openEuler more efficiently and stably.
The RISC-V SIG released Eulaceura 23H1
The RISC-V SIG[z(1]? has recently released Eulaceura 23H1[z(2]?, a RISC-V architecture distribution based on openEuler. Eulaceura 23H1 is built on the #Linux Kernel 6.1 and is compatible with the #LicheePi 4A. It provides RISC-V developers with a ready-to-use RISC-V system environment.
?
FangTian Window Engine has been running smoothly on devices
openEuler officially established the FangTian SIG in May 2023, focusing on the FangTian Window Engine (FangTian Engine for short). The #FangTian Engine includes display service, window management, and modules for graphics drawing, composition, and display. It also proposed a new FT display protocol to improve user experience in the Linux #desktop environment. After more than two months of development and testing, the demo application of the FangTian Engine has been running smoothly on devices. The FangTian Engine is in fast iteration and will be enhanced to provide more #window capabilities. You are welcome to join the FangTian SIG.
?
The SDS SIG Achieves Remarkable Progress
The SDS SIG is dedicated to creating high-quality, high-performance, and highly reliable distributed #storage components, for a thriving and streamlined ecosystem. The SDS SIG mainly focused on the following aspects:
领英推荐
The Infrastructure SIG reports its achievements
The Infrastructure SIG has been working hard to improve user experience for developers. The team has contributed a variety of tools, including openEuler Forum, QuickIssue, Software Package Contribution Platform, openEuler User Repo (EUR), and EulerLauncher. The infrastructure team has made the following progress:
?
Software & Hardware Compatibility
As of August 2023, the number of openEuler #compatibility solutions reached 1,114, including 682 northbound and 406 southbound, among which, 31 northbound and 8 southbound solutions were added in August only. This shows the continuous growth and development of the openEuler ecosystem.
?
Security Bulletins
In August, we published 94 #security notices, patched 62 CVE #vulnerabilities (including 6 critical, 35 high, and 21 others).
?
The following vulnerabilities have a significant impact and require special attention:
All versions of package gitpython are vulnerable to Remote Code Execution. (RCE). (CVE-2022-24439) – CVSS 9.8
Affected release:
openEuler 20.03 LTS SP1
openEuler 20.03 LTS SP3
openEuler 22.03 LTS
openEuler 22.03 LTS SP1
openEuler 22.03 LTS SP2
An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read. (CVE-2023-38430) – CVSS 9.1
Affected release:
openEuler 22.03 LTS
openEuler 22.03 LTS SP1
openEuler 22.03 LTS SP2
An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts. (CVE-2023-38427) – CVSS 9.8
Affected release:
openEuler 22.03 LTS
openEuler 22.03 LTS SP1
openEuler 22.03 LTS SP2
An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access. (CVE-2023-38429) – CVSS 9.8
Affected release:
openEuler 22.03 LTS
openEuler 22.03 LTS SP1
openEuler 22.03 LTS SP2
An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read. (CVE-2023-38428) – CVSS 9.8
Affected release:
openEuler 22.03 LTS
openEuler 22.03 LTS SP1
openEuler 22.03 LTS SP2
An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context s name_len is larger than the tag length. (CVE-2023-38426) – CVSS 9.8
Affected release:
openEuler 22.03 LTS
openEuler 22.03 LTS SP1
openEuler 22.03 LTS SP2
?
The openEuler community regularly fixes vulnerabilities and releases security patches. We recommend that users check the security announcements on the openEuler official website and install the patches for the vulnerabilities as soon as possible to protect their systems.
?
Thank you for your support
openEuler is thriving every day thanks to the hard work and contributions of everyone involved. We sincerely appreciate the community partners, developers, and SIG members for their valuable input.
– End –