• 安全漏洞

    安全漏洞補丁公告

    技術服務 培訓服務 常見問題 產品試用申請 技術文檔下載 安全漏洞 系統更新
    當前位置  >  首頁  >  服務支持  >  安全漏洞  >  安全漏洞補丁公告

    公告ID（KYSA-202101-0032）

    摘要：dovecot安全漏洞 安全等級：中等 公告ID：KYSA-202101-0032 發布日期：2022-01-24 影響CVE：CVE-2020-24386、CVE-2020-25275

    詳細介紹

    1.修復的CVE

        CVE-2020-24386

        Dovecot是一款開源的基于類Linux/UNIX系統的IMAP和POP3郵件服務器。Dovecot before 2.3.13 存在安全漏洞，攻擊者可利用該漏洞控制的參數觸發解除休眠，從而訪問其他用戶的電子郵件消息。

        CVE-2020-25275

        Dovecot是一款開源的基于類Linux/UNIX系統的IMAP和POP3郵件服務器。Dovecot before 2.3.13 存在安全漏洞，該漏洞源于不正確的輸入驗證，攻擊者可利用該漏洞通過一個精心制作的電子郵件消息導致應用程序崩潰。

        

    2.影響的操作系統

        銀河麒麟桌面操作系統V4 SP1

        銀河麒麟桌面操作系統V4 SP2

        銀河麒麟桌面操作系統V4 SP3

        銀河麒麟桌面操作系統V4 SP4

        銀河麒麟服務器操作系統V4 SP1

        銀河麒麟服務器操作系統V4 SP2

        銀河麒麟服務器操作系統V4 SP3

        銀河麒麟服務器操作系統V4 SP4

        銀河麒麟桌面操作系統V10

        銀河麒麟桌面操作系統V10 SP1

        

    3.修復版本

        軟件包：dovecot

        1:2.2.22-1kord2.14（V4、V10）

        1:2.3.7.2-1kylin3.3(V10 SP1)

        

    4.受影響的軟件包

        ·銀河麒麟操作系統V10桌面版、V4

        dovecot-auth-lua

        dovecot-core

        dovecot-dev

        dovecot-gssapi

        dovecot-imapd

        dovecot-ldap

        dovecot-lmtpd

        dovecot-lucene

        dovecot-managesieved

        dovecot-mysql

        dovecot-pgsql

        dovecot-pop3d

        dovecot-sieve

        dovecot-solr

        dovecot-sqlite

        dovecot-submissiond

        mail-stack-delivery

        ·銀河麒麟桌面操作系統V10 SP1

        dovecot-auth-lua

        dovecot-core

        dovecot-dev

        dovecot-gssapi

        dovecot-imapd

        dovecot-ldap

        dovecot-lmtpd

        dovecot-lucene

        dovecot-managesieved

        dovecot-mysql

        dovecot-pgsql

        dovecot-pop3d

        dovecot-sieve

        dovecot-solr

        dovecot-sqlite

        dovecot-submissiond

        mail-stack-delivery

        

    5.修復方法

    方法一：配置源進行升級安裝

        打開軟件包源配置文件，根據倉庫地址進行修改。

        4.0.2桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2-desktop main restricted universe multiverse

        4.0.2-sp1桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp1-desktop main restricted universe multiverse

        4.0.2-sp2桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp2-desktop main restricted universe multiverse

        4.0.2-sp3桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp3-desktop main restricted universe multiverse

        4.0.2-sp4桌面版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp4-desktop main restricted universe multiverse

        10.0版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 10.0 main restricted universe multiverse

        10SP1版本:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 10.1 main restricted universe multiverse

        配置完成后執行更新命令進行升級

        $sudo apt update

    方法二：下載安裝包進行升級安裝

        通過軟件包地址下載軟件包，使用軟件包升級命令根據受影響的組件包列表 升級相關的組件包。

        $dpkg -i Packagelists

        

    6.軟件包下載地址

    銀河麒麟操作系統V10桌面版、V4

    X86_64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-core_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-dbg_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-dev_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-gssapi_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-imapd_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-ldap_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lmtpd_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lucene_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-managesieved_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-mysql_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pgsql_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pop3d_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sieve_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-solr_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sqlite_2.2.22-1kord2.14_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/mail-stack-delivery_2.2.22-1kord2.14_all.deb

    arm64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-core_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-dbg_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-dev_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-gssapi_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-imapd_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-ldap_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lmtpd_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lucene_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-managesieved_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-mysql_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pgsql_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pop3d_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sieve_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-solr_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sqlite_2.2.22-1kord2.14_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/mail-stack-delivery_2.2.22-1kord2.14_all.deb

    銀河麒麟操作系統桌面版V10 SP1

    X86_64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-auth-lua_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-core_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-dev_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-gssapi_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-imapd_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-ldap_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lmtpd_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lucene_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-managesieved_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-mysql_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pgsql_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pop3d_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sieve_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-solr_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sqlite_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-submissiond_2.3.7.2-1kylin3.3_amd64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/mail-stack-delivery_2.3.7.2-1kylin3.3_all.deb

    arm64軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-auth-lua_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-core_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-dev_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-gssapi_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-imapd_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-ldap_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lmtpd_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lucene_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-managesieved_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-mysql_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pgsql_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pop3d_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sieve_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-solr_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sqlite_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-submissiond_2.3.7.2-1kylin3.3_arm64.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/mail-stack-delivery_2.3.7.2-1kylin3.3_all.deb

    mips64el軟件包下載地址

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-auth-lua_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-core_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-dev_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-gssapi_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-imapd_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-ldap_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lmtpd_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-lucene_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-managesieved_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-mysql_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pgsql_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-pop3d_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sieve_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-solr_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-sqlite_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/dovecot-submissiond_2.3.7.2-1kylin3.3_mips64el.deb

    http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/dovecot/mail-stack-delivery_2.3.7.2-1kylin3.3_all.deb


    上一篇： KYSA-202101-0031 下一篇： KYSA-202101-0033

    服務熱線

    400-089-1870

    • 國產操作系統公眾號

      微信公眾號

    • 頭條號

    版權所有 麒麟軟件有限公司 Copyright 2020. kylinos.cn. All Rights Reserved. 網站備案號: 津ICP備15002470號-1  

    試用

    服務

    動態

    聯系
    公啊灬啊灬啊灬快灬深用力视频