1. 修復的CVE CVE-2021-21708 PHP是一種在服務器端執行的腳本語言。php 存在資源管理錯誤漏洞，該漏洞源于 php_filter_float() 導致整數失敗的 UAF。 CVE-2017-9118 PHP（PHP：Hypertext Preprocessor，PHP：超文本預處理器）是PHPGroup和開放源代碼社區的共同維護的一種開源的通用計算機腳本語言。該語言主要用于Web開發，支持多種數據庫及操作系統。 PHP 7.1.5版本中的‘php_pcre_replace_impl’函數存在緩沖區錯誤漏洞。該漏洞源于網絡系統或產品在內存上執行操作時，未正確驗證數據邊界，導致向關聯的其他內存位置上執行了錯誤的讀寫操作。攻擊者可利用該漏洞導致緩沖區溢出或堆溢出等。 CVE-2021-21707 PHP是一種在服務器端執行的腳本語言。PHP 存在安全漏洞，攻擊者可以通過 Xml 函數空字符繞過 PHP 的訪問限制，以讀取或更改文件。 CVE-2017-9120 PHP（PHP：Hypertext Preprocessor，PHP：超文本預處理器）是PHP Group和開放源代碼社區共同維護的一種開源的通用計算機腳本語言。該語言主要用于Web開發，支持多種數據庫及操作系統。PHP 7.x版本至7.1.5版本中的‘mysqli_real_escape_string()’函數存在整數溢出漏洞。遠程攻擊者可借助較長的字符串利用該漏洞造成拒絕服務（緩沖區溢出和應用程序崩潰）。 CVE-2017-8923 PHP（PHP：Hypertext Preprocessor，PHP：超文本預處理器）是PHP Group和開放源代碼社區共同維護的一種開源的通用計算機腳本語言。該語言主要用于Web開發，支持多種數據庫及操作系統。 PHP 7.1.5及之前的版本中的Zend/zend_string.h文件的‘zend_string_extend’函數存在安全漏洞，該漏洞源于程序沒有阻止字符串對象的更改，導致輸出負長度值。遠程攻擊者可利用該漏洞造成拒絕服務（應用程序崩潰）。 CVE-2017-9119 PHP（PHP：Hypertext Preprocessor，PHP：超文本預處理器）是PHP Group和開放源代碼社區共同維護的一種開源的通用計算機腳本語言。該語言主要用于Web開發，支持多種數據庫及操作系統。PHP 7.1.5版本中的Zend/zend_variables.h文件的‘i_zval_ptr_dtor’函數存在安全漏洞。攻擊者可利用該漏洞造成拒絕服務（內存消耗和應用程序崩潰）。 CVE-2015-9253 PHP（PHP：Hypertext Preprocessor，PHP：超文本預處理器）是PHP Group和開放源代碼社區共同維護的一種開源的通用計算機腳本語言。該語言主要用于Web開發，支持多種數據庫及操作系統。 PHP 7.2.2及之前的版本中存在安全漏洞。攻擊者可利用該漏洞耗盡CPU資源并消耗磁盤空間。 2. 受影響的操作系統及軟件包 ·銀河麒麟桌面操作系統V10 SP1 x86_64 架構： libapache2-mod-php7.4、libphp7.4-embed、php7.4-bcmath、php7.4-bz2、php7.4-cgi、php7.4-cli、php7.4-common、php7.4-curl、php7.4-dba、php7.4-enchant、php7.4-fpm、php7.4-gd、php7.4-gmp、php7.4-imap、php7.4-interbase、php7.4-intl、php7.4-json、php7.4-ldap、php7.4-mbstring、php7.4-mysql、php7.4-odbc、php7.4-opcache、php7.4-pgsql、php7.4-phpdbg、php7.4-pspell、php7.4-readline、php7.4-snmp、php7.4-soap、php7.4-sqlite3、php7.4-sybase、php7.4-tidy、php7.4-xml、php7.4-xmlrpc、php7.4-xsl、php7.4-zip、php7.4 arm64 架構： libapache2-mod-php7.4、libphp7.4-embed、php7.4-bcmath、php7.4-bz2、php7.4-cgi、php7.4-cli、php7.4-common、php7.4-curl、php7.4-dba、php7.4-enchant、php7.4-fpm、php7.4-gd、php7.4-gmp、php7.4-imap、php7.4-interbase、php7.4-intl、php7.4-json、php7.4-ldap、php7.4-mbstring、php7.4-mysql、php7.4-odbc、php7.4-opcache、php7.4-pgsql、php7.4-phpdbg、php7.4-pspell、php7.4-readline、php7.4-snmp、php7.4-soap、php7.4-sqlite3、php7.4-sybase、php7.4-tidy、php7.4-xml、php7.4-xmlrpc、php7.4-xsl、php7.4-zip、php7.4 mips64el 架構： libapache2-mod-php7.4、libphp7.4-embed、php7.4-bcmath、php7.4-bz2、php7.4-cgi、php7.4-cli、php7.4-common、php7.4-curl、php7.4-dba、php7.4-enchant、php7.4-fpm、php7.4-gd、php7.4-gmp、php7.4-imap、php7.4-interbase、php7.4-intl、php7.4-json、php7.4-ldap、php7.4-mbstring、php7.4-mysql、php7.4-odbc、php7.4-opcache、php7.4-pgsql、php7.4-phpdbg、php7.4-pspell、php7.4-readline、php7.4-snmp、php7.4-soap、php7.4-sqlite3、php7.4-sybase、php7.4-tidy、php7.4-xml、php7.4-xmlrpc、php7.4-xsl、php7.4-zip、php7.4 3. 軟件包修復版本 ·銀河麒麟桌面操作系統V10 SP1 7.4.3-4kylin2.10 4. 修復方法 方法一：升級安裝 執行更新命令進行升級 $sudo apt update $sudo apt install php7.4 方法二：下載軟件包進行升級安裝 通過軟件包地址下載軟件包，使用軟件包升級命令根據受影響的軟件包列表升級相關的組件包。 $sudo dpkg -i /Path1/Package1 /Path2/Package2 /Path3/Package3…… 注：Path 指軟件包下載到本地的路徑，Package指下載的軟件包名稱，多個軟件包則以空格分開。 5. 軟件包下載地址 銀河麒麟桌面操作系統V10 SP1 x86_64軟件包下載地址 http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/libapache2-mod-php7.4_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/libphp7.4-embed_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-bcmath_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-bz2_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-cgi_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-cli_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-common_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-curl_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-dba_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-enchant_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-fpm_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-gd_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-gmp_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-imap_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-interbase_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-intl_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-json_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-ldap_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-mbstring_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-mysql_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-odbc_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-opcache_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-pgsql_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-phpdbg_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-pspell_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-readline_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-snmp_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-soap_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-sqlite3_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-sybase_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-tidy_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-xml_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-xmlrpc_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-xsl_7.4.3-4kylin2.10_all.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-zip_7.4.3-4kylin2.10_amd64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4_7.4.3-4kylin2.10_all.deb arm64軟件包下載地址 http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/libapache2-mod-php7.4_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/libphp7.4-embed_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-bcmath_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-bz2_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-cgi_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-cli_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-common_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-curl_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-dba_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-enchant_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-fpm_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-gd_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-gmp_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-imap_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-interbase_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-intl_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-json_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-ldap_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-mbstring_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-mysql_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-odbc_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-opcache_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-pgsql_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-phpdbg_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-pspell_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-readline_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-snmp_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-soap_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-sqlite3_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-sybase_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-tidy_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-xml_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-xmlrpc_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-xsl_7.4.3-4kylin2.10_all.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-zip_7.4.3-4kylin2.10_arm64.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4_7.4.3-4kylin2.10_all.deb mips64el軟件包下載地址 http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/libapache2-mod-php7.4_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/libphp7.4-embed_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-bcmath_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-bz2_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-cgi_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-cli_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-common_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-curl_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-dba_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-enchant_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-fpm_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-gd_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-gmp_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-imap_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-interbase_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-intl_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-json_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-ldap_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-mbstring_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-mysql_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-odbc_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-opcache_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-pgsql_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-phpdbg_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-pspell_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-readline_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-snmp_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-soap_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-sqlite3_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-sybase_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-tidy_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-xml_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-xmlrpc_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-xsl_7.4.3-4kylin2.10_all.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4-zip_7.4.3-4kylin2.10_mips64el.deb http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/php7.4/php7.4_7.4.3-4kylin2.10_all.deb 6. 修復驗證 使用軟件包查詢命令，查看相關的軟件包版本大于或等于修復版本則成功修復。 $sudo dpkg -l |grep Package 注：Package為軟件包包名。