• 安全漏洞

    安全漏洞補丁公告

    當前位置  >  首頁  >  服務支持  >  安全漏洞  >  安全漏洞補丁公告

    公告ID(KYSA-202109-0018

    摘要:vim安全漏洞 安全等級:中危 公告ID:KYSA-202109-0018 發布日期:2021-12-24 影響CVE:CVE-2021-3770、CVE-2021-3778、CVE-2021-3796

    詳細介紹

     1.修復的CVE

        CVE-2021-3770

        Vim是一款基于UNIX平臺的編輯器。vim 存在緩沖區錯誤漏洞,該漏洞源于vim軟件中使用retab的值較大時內存訪問無效,從而導致基于堆的緩沖區溢出。

        CVE-2021-3778

        Vim是一款基于UNIX平臺的編輯器。vim存在安全漏洞,該漏洞源于網絡系統或產品的代碼開發過程中存在設計或實現不當的問題。

        CVE-2021-3796

        Google Chrome是美國谷歌(Google)公司的一款Web瀏覽器。Google Chrome 存在安全特征問題漏洞,該漏洞源于谷歌Chrome的后臺獲取API不正確的實現。

        

    2.影響的操作系統

        銀河麒麟桌面操作系統V10 SP1

        

    3.修復版本

        軟件包:vim

        8.1.2269-1kylin5.3k2(V10 SP1)

        

    4.受影響的軟件包

        ·銀河麒麟桌面操作系統V10 SP1

        vim

        vim-athena

        vim-common

        vim-doc

        vim-gtk

        vim-gtk3

        vim-gui-common

        vim-nox

        vim-runtime

        vim-tiny

        xxd

        

    5.修復方法

    方法一:配置源進行升級安裝

        打開軟件包源配置文件,根據倉庫地址進行修改。

        4.0.2桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2-desktop main restricted universe multiverse

        4.0.2-sp1桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp1-desktop main restricted universe multiverse

        4.0.2-sp2桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp2-desktop main restricted universe multiverse

        4.0.2-sp3桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp3-desktop main restricted universe multiverse

        4.0.2-sp4桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp4-desktop main restricted universe multiverse

        10.0版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 10.0 main restricted universe multiverse

        10SP1版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 10.1 main restricted universe multiverse

        配置完成后執行更新命令進行升級

        $sudo apt update

    方法二:下載安裝包進行升級安裝

        通過軟件包地址下載軟件包,使用軟件包升級命令根據受影響的組件包列表 升級相關的組件包。

        $dpkg -i Packagelists

        

    6.軟件包下載地址

    銀河麒麟操作系統桌面版V10 SP1

    X86_64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-athena_8.1.2269-1kylin5.3k2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-common_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-doc_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-gtk3_8.1.2269-1kylin5.3k2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-gtk_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-gui-common_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-nox_8.1.2269-1kylin5.3k2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-runtime_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-tiny_8.1.2269-1kylin5.3k2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim_8.1.2269-1kylin5.3k2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/xxd_8.1.2269-1kylin5.3k2_amd64.deb

    arm64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-athena_8.1.2269-1kylin5.3k2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-common_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-doc_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-gtk3_8.1.2269-1kylin5.3k2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-gtk_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-gui-common_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-nox_8.1.2269-1kylin5.3k2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-runtime_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-tiny_8.1.2269-1kylin5.3k2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim_8.1.2269-1kylin5.3k2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/xxd_8.1.2269-1kylin5.3k2_arm64.deb

    mips64el軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-athena_8.1.2269-1kylin5.3k2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-common_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-doc_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-gtk3_8.1.2269-1kylin5.3k2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-gtk_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-gui-common_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-nox_8.1.2269-1kylin5.3k2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-runtime_8.1.2269-1kylin5.3k2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim-tiny_8.1.2269-1kylin5.3k2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/vim_8.1.2269-1kylin5.3k2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/v/vim/xxd_8.1.2269-1kylin5.3k2_mips64el.deb


    上一篇: KYSA-202112-1046 下一篇: KYSA-202111-0006

    試用

    服務

    動態

    聯系

    公啊灬啊灬啊灬快灬深用力视频