1.修復的CVE

    CVE-2021-3933

    ILM OpenEXR是美國Industrial Light and Magic（ILM）公司的一種圖像文件格式，適用于高動態范圍（HDR）圖像。ILM OpenEXR 存在安全漏洞，攻擊者可利用該漏洞通過精心構造的EXR文件導致程序崩潰或者執行任意代碼。

    CVE-2021-3941

    ILM OpenEXR是美國Industrial Light and Magic（ILM）公司的一種圖像文件格式，適用于高動態范圍（HDR）圖像。ILM OpenEXR 存在安全漏洞，該漏洞源于 OpenEXR 錯誤地處理了某些 EXR 圖像文件。攻擊者可能會利用此問題導致崩潰。

2.影響的操作系統

    銀河麒麟桌面操作系統V4 SP1

    銀河麒麟桌面操作系統V4 SP2

    銀河麒麟桌面操作系統V4 SP3

    銀河麒麟桌面操作系統V4 SP4

    銀河麒麟服務器操作系統V4 SP1

    銀河麒麟服務器操作系統V4 SP2

    銀河麒麟服務器操作系統V4 SP3

    銀河麒麟服務器操作系統V4 SP4

    銀河麒麟桌面操作系統V10

3.修復版本

    軟件包：openexr

    2.2.0-10kord2.6+esm3（V4、V10）

4.受影響的軟件包

    ·銀河麒麟操作系統V10桌面版、V4

    libopenexr-dev

    libopenexr22

    openexr-doc

    openexr

5.修復方法

方法一：配置源進行升級安裝

打開軟件包源配置文件，根據倉庫地址進行修改。

4.0.2-sp1:

http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp1-desktop main restricted universe multiverse

4.0.2-sp2:

http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp2-desktop main restricted universe multiverse

4.0.2-sp3:

http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp3-desktop main restricted universe multiverse

4.0.2-sp4:

http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp4-desktop main restricted universe multiverse

10.0:

http://archive.kylinos.cn/kylin/KYLIN-ALL 10.0 main restricted universe multiverse

10.0 SP1:

http://archive.kylinos.cn/kylin/KYLIN-ALL 10.1 main restricted universe multiverse

配置完成后執行更新命令進行升級

$sudo apt update

6.軟件包下載地址

銀河麒麟操作系統V10桌面版、V4

X86_64軟件包下載地址

http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/o/openexr/libopenexr-dev_2.2.0-10kord2.6%2Besm3_amd64.deb

http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/o/openexr/libopenexr22_2.2.0-10kord2.6%2Besm3_amd64.deb

http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/o/openexr/openexr-doc_2.2.0-10kord2.6%2Besm3_all.deb

http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/o/openexr/openexr_2.2.0-10kord2.6%2Besm3_amd64.deb

arm64軟件包下載地址

http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/o/openexr/libopenexr-dev_2.2.0-10kord2.6%2Besm3_arm64.deb

http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/o/openexr/libopenexr22_2.2.0-10kord2.6%2Besm3_arm64.deb

http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/o/openexr/openexr-doc_2.2.0-10kord2.6%2Besm3_all.deb

http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/o/openexr/openexr_2.2.0-10kord2.6%2Besm3_arm64.deb