1.修復的CVE
CVE-2020-29361
P11-glue P11-kit是P11-glue個人開發者的一個用于加載和枚舉PKCS模塊的工具軟件。
P11-glue P11-kit 0.21.1到0.23.21版本中存在安全漏洞，目前尚無此漏洞的相關信息，請隨時關注CNNVD或廠商公告。
CVE-2020-29362
P11-glue P11-kit是P11-glue個人開發者的一個用于加載和枚舉PKCS模塊的工具軟件。
P11-glue P11-kit server/remote 0.23.6版本至0.23.21版本存在緩沖區錯誤漏洞，該漏洞源于使用的RPC協議中發現了基于堆的緩沖區超讀。當遠程實體通過序列化的PKCS#11函數調用提供字節數組時，接收實體可能允許讀取超過堆分配的最多4個字節的內存。
CVE-2020-29363
P11-glue P11-kit是P11-glue個人開發者的一個用于加載和枚舉PKCS模塊的工具軟件。
P11-glue P11-kit server/remote 0.23.6版本至0.23.21版本存在緩沖區錯誤漏洞，該漏洞源于RPC協議中發現了基于堆的緩沖區溢出，當遠程實體在CK_ATTRIBUTE中提供序列化的字節數組時，接收實體可能沒有為緩沖區分配足夠的長度來存儲反序列化的值。
銀河麒麟桌面操作系統V4 SP1
銀河麒麟桌面操作系統V4 SP2
銀河麒麟桌面操作系統V4 SP3
銀河麒麟桌面操作系統V4 SP4
銀河麒麟服務器操作系統V4 SP1
銀河麒麟服務器操作系統V4 SP2
銀河麒麟服務器操作系統V4 SP3
銀河麒麟服務器操作系統V4 SP4
銀河麒麟桌面操作系統V10
銀河麒麟桌面操作系統V10 SP1
軟件包：p11-kit
0.23.2-5~kord16.04.2(V4、V10)
0.23.20-1kylin0.1(V10 SP1)
·銀河麒麟操作系統V10桌面版、V4
libp11-kit-dev
libp11-kit0
p11-kit
p11-kit-modules
·銀河麒麟桌面操作系統V10 SP1
libp11-kit-dev
libp11-kit0
p11-kit
p11-kit-modules
打開軟件包源配置文件，根據倉庫地址進行修改。
4.0.2桌面版本:
http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2-desktop main restricted universe multiverse
4.0.2-sp1桌面版本:
http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp1-desktop main restricted universe multiverse
4.0.2-sp2桌面版本:
http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp2-desktop main restricted universe multiverse
4.0.2-sp3桌面版本:
http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp3-desktop main restricted universe multiverse
4.0.2-sp4桌面版本:
http://archive.kylinos.cn/kylin/KYLIN-ALL 4.0.2sp4-desktop main restricted universe multiverse
10.0版本:
http://archive.kylinos.cn/kylin/KYLIN-ALL 10.0 main restricted universe multiverse
10SP1版本:
http://archive.kylinos.cn/kylin/KYLIN-ALL 10.1 main restricted universe multiverse
配置完成后執行更新命令進行升級
$sudo apt update
通過軟件包地址下載軟件包，使用軟件包升級命令根據受影響的組件包列表 升級相關的組件包。
$dpkg -i Packagelists
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit-dev_0.23.2-5~kord16.04.2_amd64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit0_0.23.2-5~kord16.04.2_amd64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit-modules_0.23.2-5~kord16.04.2_amd64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit_0.23.2-5~kord16.04.2_amd64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit-dev_0.23.2-5~kord16.04.2_arm64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit0_0.23.2-5~kord16.04.2_arm64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit-modules_0.23.2-5~kord16.04.2_arm64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit_0.23.2-5~kord16.04.2_arm64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit-dev_0.23.20-1kylin0.1_amd64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit0_0.23.20-1kylin0.1_amd64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit-modules_0.23.20-1kylin0.1_amd64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit_0.23.20-1kylin0.1_amd64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit-dev_0.23.20-1kylin0.1_arm64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit0_0.23.20-1kylin0.1_arm64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit-modules_0.23.20-1kylin0.1_arm64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit_0.23.20-1kylin0.1_arm64.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit-dev_0.23.20-1kylin0.1_mips64el.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/libp11-kit0_0.23.20-1kylin0.1_mips64el.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit-modules_0.23.20-1kylin0.1_mips64el.deb
http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/p11-kit/p11-kit_0.23.20-1kylin0.1_mips64el.deb
