<div id="0jj4m"></div>

    1. <em id="0jj4m"></em>
        <em id="0jj4m"></em>

        安全漏洞

        安全漏洞補丁公告

        當前位置  >  首頁  >  服務支持  >  安全漏洞  >  安全漏洞補丁公告

        公告ID(KYSA-202102-0059

        公告ID:KYSA-202102-0059 公告摘要:python安全漏洞 安全等級:中等 發布日期:2022-02-24 影響CVE:CVE-2021-3737、CVE-2020-27619、CVE-2021-3177

        詳細介紹

        1. 修復的CVE

        CVE-2021-3737

        PythonPython基金會的一套開源的、面向對象的程序設計語言。該語言具有可擴展、支持模塊和包、支持多種平臺等特點。Python 中存在代碼問題漏洞,該漏洞源于產品未能正確處理服務響應。攻擊者可通過該漏洞導致拒絕服務。 以下產品及版本受到影響:Python 3.4 For Ubuntu 14.04Python3.4-minimal For Ubuntu 16.04

        CVE-2020-27619

        PythonPython基金會的一套開源的、面向對象的程序設計語言。該語言具有可擴展、支持模塊和包、支持多種平臺等特點。

        Python 3 3.9版本存在安全漏洞,該漏洞源于Lib/test/multibytecodec_support.py CJK 編輯器測試對通過HTTP檢索的內容調用eval()函數。

        CVE-2021-3177

        PythonPython基金會的一套開源的、面向對象的程序設計語言。該語言具有可擴展、支持模塊和包、支持多種平臺等特點。

        Python 3.x through 3.9.1 存在緩沖區錯誤漏洞,該漏洞源于PyCArg_repr in _ctypes/callproc.c,攻擊者可利用該漏洞執行遠程代碼。

        2. 受影響的操作系統及軟件包

        ·銀河麒麟桌面操作系統V10

        x86_64 架構:

        python2.7idle-python2.7libpython2.7-dbglibpython2.7-minimallibpython2.7-stdliblibpython2.7-testsuitelibpython2.7python2.7-dbgpython2.7-examplespython2.7-minimalpython2.7

        python3.5idle-python3.5libpython3.5-minimallibpython3.5-stdliblibpython3.5-testsuitelibpython3.5python3.5-examplespython3.5-minimalpython3.5-venvpython3.5

        arm64 架構:

        python2.7idle-python2.7libpython2.7-dbglibpython2.7-minimallibpython2.7-stdliblibpython2.7-testsuitelibpython2.7python2.7-dbgpython2.7-examplespython2.7-minimalpython2.7

        python3.5idle-python3.5libpython3.5-minimallibpython3.5-stdliblibpython3.5-testsuitelibpython3.5python3.5-examplespython3.5-minimalpython3.5-venvpython3.5

        3. 軟件包修復版本

        ·銀河麒麟桌面操作系統V10

        python2.72.7.12-1kord0~16.04.18

        python3.53.5.2-2kord0~16.04.13

        4. 修復方法

        方法一:配置源進行升級安裝

        打開軟件包源配置文件,根據倉庫地址進行修改。

        10.0:

        http://archive.kylinos.cn/kylin/KYLIN-ALL 10.0 main restricted universe multiverse

        配置完成后執行更新命令進行升級

        $sudo apt update

        $sudo apt install python2.7

        $sudo apt install python3.5

        方法二:下載軟件包進行升級安裝

        通過軟件包地址下載軟件包,使用軟件包升級命令根據受影響的軟件包列表升級相關的組件包。

        $sudo dpkg -i /Path1/Package1 /Path2/Package2 /Path3/Package3……

        注:Path 指軟件包下載到本地的路徑,Package指下載的軟件包名稱,多個軟件包則以空格分開。

        5. 軟件包下載地址

        銀河麒麟桌面操作系統V10

        x86_64軟件包下載地址

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/idle-python2.7_2.7.12-1kord0~16.04.18_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7-dbg_2.7.12-1kord0~16.04.18_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7-minimal_2.7.12-1kord0~16.04.18_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7-stdlib_2.7.12-1kord0~16.04.18_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7-testsuite_2.7.12-1kord0~16.04.18_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7_2.7.12-1kord0~16.04.18_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/python2.7-dbg_2.7.12-1kord0~16.04.18_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/python2.7-examples_2.7.12-1kord0~16.04.18_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/python2.7-minimal_2.7.12-1kord0~16.04.18_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/python2.7_2.7.12-1kord0~16.04.18_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/idle-python3.5_3.5.2-2kord0~16.04.13_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/libpython3.5-minimal_3.5.2-2kord0~16.04.13_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/libpython3.5-stdlib_3.5.2-2kord0~16.04.13_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/libpython3.5-testsuite_3.5.2-2kord0~16.04.13_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/libpython3.5_3.5.2-2kord0~16.04.13_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/python3.5-examples_3.5.2-2kord0~16.04.13_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/python3.5-minimal_3.5.2-2kord0~16.04.13_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/python3.5-venv_3.5.2-2kord0~16.04.13_amd64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/python3.5_3.5.2-2kord0~16.04.13_amd64.deb

        arm64軟件包下載地址

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/idle-python2.7_2.7.12-1kord0~16.04.18_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7-dbg_2.7.12-1kord0~16.04.18_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7-minimal_2.7.12-1kord0~16.04.18_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7-stdlib_2.7.12-1kord0~16.04.18_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7-testsuite_2.7.12-1kord0~16.04.18_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/libpython2.7_2.7.12-1kord0~16.04.18_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/python2.7-dbg_2.7.12-1kord0~16.04.18_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/python2.7-examples_2.7.12-1kord0~16.04.18_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/python2.7-minimal_2.7.12-1kord0~16.04.18_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python2.7/python2.7_2.7.12-1kord0~16.04.18_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/idle-python3.5_3.5.2-2kord0~16.04.13_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/libpython3.5-minimal_3.5.2-2kord0~16.04.13_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/libpython3.5-stdlib_3.5.2-2kord0~16.04.13_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/libpython3.5-testsuite_3.5.2-2kord0~16.04.13_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/libpython3.5_3.5.2-2kord0~16.04.13_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/python3.5-examples_3.5.2-2kord0~16.04.13_all.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/python3.5-minimal_3.5.2-2kord0~16.04.13_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/python3.5-venv_3.5.2-2kord0~16.04.13_arm64.deb

        http://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/p/python3.5/python3.5_3.5.2-2kord0~16.04.13_arm64.deb

         

        6. 修復驗證

        使用軟件包查詢命令,查看相關的軟件包版本與修復版本一致則成功修復。

        $sudo dpkg -l |grep Package

        注:Package為軟件包包名。


        上一篇: KYSA-202202-1016 下一篇: KYSA-202202-1018

        試用

        服務

        動態

        聯系

        <div id="0jj4m"></div>

        1. <em id="0jj4m"></em>
            <em id="0jj4m"></em>

            欧美精品一区二区三区