• 安全漏洞

    安全漏洞補丁公告

    技術服務 培訓服務 常見問題 產品試用申請 技術文檔下載 安全漏洞 系統更新
    當前位置  >  首頁  >  服務支持  >  安全漏洞  >  安全漏洞補丁公告

    公告ID（KYSA-202101-0031）

    摘要：libproxy安全漏洞 安全等級：中等 公告ID：KYSA-202101-0031 發布日期：2022-01-24 影響CVE：CVE-2020-26154

    詳細介紹

    1.修復的CVE

        CVE-2020-26154

        libproxy是個人開發者的一個提供自動配置代理的庫。

        libproxy 0.4.15版本存在緩沖區錯誤漏洞，該漏洞源于urls .cpp很容易發生緩沖區溢出，這從一個沒有內容長度頭的大PAC文件就可以看出。


    2.影響的操作系統

        銀河麒麟桌面操作系統V4 SP1

        銀河麒麟桌面操作系統V4 SP2

        銀河麒麟桌面操作系統V4 SP3

        銀河麒麟桌面操作系統V4 SP4

        銀河麒麟服務器操作系統V4 SP1

        銀河麒麟服務器操作系統V4 SP2

        銀河麒麟服務器操作系統V4 SP3

        銀河麒麟服務器操作系統V4 SP4

        銀河麒麟桌面操作系統V10

        銀河麒麟桌面操作系統V10 SP1

        

    3.修復版本

        軟件包：libproxy

        0.4.11-5kord1.2（V4、V10）

        0.4.15-10kylin1.2(V10 SP1)

        

    4.受影響的軟件包

        ·銀河麒麟操作系統V10桌面版、V4

        libproxy-cil-dev

        libproxy-dev

        libproxy-tools

        libproxy0.4-cil

        libproxy1-plugin-gsettings

        libproxy1-plugin-kconfig

        libproxy1-plugin-mozjs

        libproxy1-plugin-networkmanager

        libproxy1-plugin-webkit

        libproxy1v5

        python3-libproxy

        ·銀河麒麟桌面操作系統V10 SP1

        libproxy-cil-dev

        libproxy-dev

        libproxy-tools

        libproxy0.4-cil

        libproxy1-plugin-gsettings

        libproxy1-plugin-kconfig

        libproxy1-plugin-mozjs

        libproxy1-plugin-networkmanager

        libproxy1-plugin-webkit

        libproxy1v5

        python3-libproxy

        

    5.修復方法

    方法一：配置源進行升級安裝

        打開軟件包源配置文件，根據倉庫地址進行修改。

        4.0.2桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2-desktop main restricted universe multiverse

        4.0.2-sp1桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp1-desktop main restricted universe multiverse

        4.0.2-sp2桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp2-desktop main restricted universe multiverse

        4.0.2-sp3桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp3-desktop main restricted universe multiverse

        4.0.2-sp4桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp4-desktop main restricted universe multiverse

        10.0版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 10.0 main restricted universe multiverse

        10SP1版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 10.1 main restricted universe multiverse

        配置完成后執行更新命令進行升級

        $sudo apt update

    方法二：下載安裝包進行升級安裝

        通過軟件包地址下載軟件包，使用軟件包升級命令根據受影響的組件包列表 升級相關的組件包。

        $dpkg -i Packagelists

        

    6.軟件包下載地址

    銀河麒麟操作系統桌面版V10 SP1

    X86_64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-cil-dev_0.4.15-10kylin1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-dev_0.4.15-10kylin1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-tools_0.4.15-10kylin1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy0.4-cil_0.4.15-10kylin1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-gsettings_0.4.15-10kylin1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-kconfig_0.4.15-10kylin1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-mozjs_0.4.15-10kylin1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-networkmanager_0.4.15-10kylin1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-webkit_0.4.15-10kylin1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1v5_0.4.15-10kylin1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/python3-libproxy_0.4.15-10kylin1.2_all.deb

    arm64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-cil-dev_0.4.15-10kylin1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-dev_0.4.15-10kylin1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-tools_0.4.15-10kylin1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy0.4-cil_0.4.15-10kylin1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-gsettings_0.4.15-10kylin1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-kconfig_0.4.15-10kylin1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-mozjs_0.4.15-10kylin1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-networkmanager_0.4.15-10kylin1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-webkit_0.4.15-10kylin1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1v5_0.4.15-10kylin1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/python3-libproxy_0.4.15-10kylin1.2_all.deb

    mips64el軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-cil-dev_0.4.15-10kylin1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-dev_0.4.15-10kylin1.2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-tools_0.4.15-10kylin1.2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy0.4-cil_0.4.15-10kylin1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-gsettings_0.4.15-10kylin1.2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-kconfig_0.4.15-10kylin1.2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-mozjs_0.4.15-10kylin1.2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-networkmanager_0.4.15-10kylin1.2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-webkit_0.4.15-10kylin1.2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1v5_0.4.15-10kylin1.2_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/python3-libproxy_0.4.15-10kylin1.2_all.deb

    銀河麒麟操作系統V10桌面版、V4

    X86_64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-cil-dev_0.4.11-5kord1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-dev_0.4.11-5kord1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-tools_0.4.11-5kord1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy0.4-cil_0.4.11-5kord1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-gsettings_0.4.11-5kord1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-kconfig_0.4.11-5kord1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-networkmanager_0.4.11-5kord1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-webkit_0.4.11-5kord1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1v5_0.4.11-5kord1.2_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/python-libproxy_0.4.11-5kord1.2_all.deb

    arm64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-cil-dev_0.4.11-5kord1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-dev_0.4.11-5kord1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy-tools_0.4.11-5kord1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy0.4-cil_0.4.11-5kord1.2_all.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-gsettings_0.4.11-5kord1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-kconfig_0.4.11-5kord1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-networkmanager_0.4.11-5kord1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1-plugin-webkit_0.4.11-5kord1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/libproxy1v5_0.4.11-5kord1.2_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libp/libproxy/python-libproxy_0.4.11-5kord1.2_all.deb


    上一篇： KYSA-202201-0006 下一篇： KYSA-202101-0032

    服務熱線

    400-089-1870

    • 國產操作系統公眾號

      微信公眾號

    • 頭條號

    版權所有 麒麟軟件有限公司 Copyright 2020. kylinos.cn. All Rights Reserved. 網站備案號: 津ICP備15002470號-1  

    試用

    服務

    動態

    聯系
    公啊灬啊灬啊灬快灬深用力视频