1. 修復的CVE CVE-2021-43527 Mozilla Network Security Services（NSS）是一個函數庫（網絡安全服務庫）。該產品可跨平臺提供SSL、S/MIME和其他Internet安全標準支持。 Mozilla Network Security Services（NSS）中的 verifies certificates 存在緩沖區錯誤漏洞，該漏洞源于在NSS驗證證書的方式中存在缺陷。攻擊者可通過使用NSS編譯的客戶端應用程序發起SSL TLS連接來觸發漏洞。 CVE-2021-38493 Mozilla Firefox是一款開源Web瀏覽器。Mozilla Firefox 中存在緩沖區錯誤漏洞，該漏洞源于產品處理HTML內容時出現邊界錯誤。遠程攻擊者可利用該漏洞可以創建一個專門制作的網頁，誘騙受害者打開它，引發內存損壞，并在目標系統上執行任意代碼。 2. 受影響的操作系統及軟件包 mips64el 架構： thunderbird-gnome-support、thunderbird-locale-af、thunderbird-locale-ar、thunderbird-locale-ast、thunderbird-locale-be、thunderbird-locale-bg、thunderbird-locale-bn-bd、thunderbird-locale-bn、thunderbird-locale-br、thunderbird-locale-ca、thunderbird-locale-cak、thunderbird-locale-cs、thunderbird-locale-cy、thunderbird-locale-da、thunderbird-locale-de、thunderbird-locale-dsb、thunderbird-locale-el、thunderbird-locale-en-gb、thunderbird-locale-en-us、thunderbird-locale-en、thunderbird-locale-es-ar、thunderbird-locale-es-es、thunderbird-locale-es、thunderbird-locale-et、thunderbird-locale-eu、thunderbird-locale-fa、thunderbird-locale-fi、thunderbird-locale-fr、thunderbird-locale-fy-nl、thunderbird-locale-fy、thunderbird-locale-ga-ie、thunderbird-locale-ga、thunderbird-locale-gd、thunderbird-locale-gl、thunderbird-locale-he、thunderbird-locale-hr、thunderbird-locale-hsb、thunderbird-locale-hu、thunderbird-locale-hy、thunderbird-locale-id、thunderbird-locale-is、thunderbird-locale-it、thunderbird-locale-ja、thunderbird-locale-ka、thunderbird-locale-kab、thunderbird-locale-kk、thunderbird-locale-ko、thunderbird-locale-lt、thunderbird-locale-mk、thunderbird-locale-ms、thunderbird-locale-nb-no、thunderbird-locale-nb、thunderbird-locale-nl、thunderbird-locale-nn-no、thunderbird-locale-nn、thunderbird-locale-pa-in、thunderbird-locale-pa、thunderbird-locale-pl、thunderbird-locale-pt-br、thunderbird-locale-pt-pt、thunderbird-locale-pt、thunderbird-locale-rm、thunderbird-locale-ro、thunderbird-locale-ru、thunderbird-locale-si、thunderbird-locale-sk、thunderbird-locale-sl、thunderbird-locale-sq、thunderbird-locale-sr、thunderbird-locale-sv-se、thunderbird-locale-sv、thunderbird-locale-ta-lk、thunderbird-locale-ta、thunderbird-locale-th、thunderbird-locale-tr、thunderbird-locale-uk、thunderbird-locale-uz、thunderbird-locale-vi、thunderbird-locale-zh-cn、thunderbird-locale-zh-hans、thunderbird-locale-zh-hant、thunderbird-locale-zh-tw、thunderbird、xul-ext-calendar-timezones、xul-ext-gdata-provider、xul-ext-lightning 3. 軟件包修復版本 ·銀河麒麟桌面操作系統V10 SP1 1:78.14.0+build1-0kylin0.20.04.2k1 4. 修復方法 方法一：升級安裝 執行更新命令進行升級 $sudo apt update $sudo apt install thunderbird 方法二：下載軟件包進行升級安裝 通過軟件包地址下載軟件包，使用軟件包升級命令根據受影響的軟件包列表升級相關的組件包。 $sudo dpkg -i /Path1/Package1 /Path2/Package2 /Path3/Package3…… 注：Path 指軟件包下載到本地的路徑，Package指下載的軟件包名稱，多個軟件包則以空格分開。 5. 軟件包下載地址 銀河麒麟桌面操作系統V10 SP1 mips64el軟件包下載地址 https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-gnome-support_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-af_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ar_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ast_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-be_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-bg_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-bn-bd_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-bn_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-br_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ca_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-cak_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-cs_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-cy_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-da_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-de_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-dsb_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-el_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-en-gb_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-en-us_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-en_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-es-ar_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-es-es_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-es_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-et_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-eu_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fa_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fi_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fr_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fy-nl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fy_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ga-ie_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ga_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-gd_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-gl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-he_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-hr_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-hsb_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-hu_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-hy_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-id_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-is_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-it_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ja_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ka_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-kab_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-kk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ko_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-lt_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-mk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ms_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nb-no_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nb_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nn-no_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nn_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pa-in_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pa_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pt-br_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pt-pt_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pt_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-rm_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ro_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ru_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-si_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sq_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sr_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sv-se_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sv_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ta-lk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ta_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-th_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-tr_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-uk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-uz_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-vi_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-zh-cn_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-zh-hans_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-zh-hant_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-zh-tw_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/xul-ext-calendar-timezones_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/xul-ext-gdata-provider_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/xul-ext-lightning_78.14.0%2Bbuild1-0kylin0.20.04.2k1_mips64el.deb 6. 修復驗證 使用軟件包查詢命令，查看相關的軟件包版本大于或等于修復版本則成功修復。 $sudo dpkg -l |grep Package 注：Package為軟件包包名。