1. 修复的CVE CVE-2021-43527 Mozilla Network Security Services（NSS）是一个函数库（网络安全服务库）。该产品可跨平台提供SSL、S/MIME和其他Internet安全标准支持。 Mozilla Network Security Services（NSS）中的 verifies certificates 存在缓冲区错误漏洞，该漏洞源于在NSS验证证书的方式中存在缺陷。攻击者可通过使用NSS编译的客户端应用程序发起SSL TLS连接来触发漏洞。 CVE-2021-38493 Mozilla Firefox是一款开源Web浏览器。Mozilla Firefox 中存在缓冲区错误漏洞，该漏洞源于产品处理HTML内容时出现边界错误。远程攻击者可利用该漏洞可以创建一个专门制作的网页，诱骗受害者打开它，引发内存损坏，并在目标系统上执行任意代码。 2. 受影响的操作系统及软件包 ·银河麒麟桌面操作系统V10 SP1 x86_64 架构： thunderbird-gnome-support、thunderbird-locale-af、thunderbird-locale-ar、thunderbird-locale-ast、thunderbird-locale-be、thunderbird-locale-bg、thunderbird-locale-bn-bd、thunderbird-locale-bn、thunderbird-locale-br、thunderbird-locale-ca、thunderbird-locale-cak、thunderbird-locale-cs、thunderbird-locale-cy、thunderbird-locale-da、thunderbird-locale-de、thunderbird-locale-dsb、thunderbird-locale-el、thunderbird-locale-en-gb、thunderbird-locale-en-us、thunderbird-locale-en、thunderbird-locale-es-ar、thunderbird-locale-es-es、thunderbird-locale-es、thunderbird-locale-et、thunderbird-locale-eu、thunderbird-locale-fa、thunderbird-locale-fi、thunderbird-locale-fr、thunderbird-locale-fy-nl、thunderbird-locale-fy、thunderbird-locale-ga-ie、thunderbird-locale-ga、thunderbird-locale-gd、thunderbird-locale-gl、thunderbird-locale-he、thunderbird-locale-hr、thunderbird-locale-hsb、thunderbird-locale-hu、thunderbird-locale-hy、thunderbird-locale-id、thunderbird-locale-is、thunderbird-locale-it、thunderbird-locale-ja、thunderbird-locale-ka、thunderbird-locale-kab、thunderbird-locale-kk、thunderbird-locale-ko、thunderbird-locale-lt、thunderbird-locale-mk、thunderbird-locale-ms、thunderbird-locale-nb-no、thunderbird-locale-nb、thunderbird-locale-nl、thunderbird-locale-nn-no、thunderbird-locale-nn、thunderbird-locale-pa-in、thunderbird-locale-pa、thunderbird-locale-pl、thunderbird-locale-pt-br、thunderbird-locale-pt-pt、thunderbird-locale-pt、thunderbird-locale-rm、thunderbird-locale-ro、thunderbird-locale-ru、thunderbird-locale-si、thunderbird-locale-sk、thunderbird-locale-sl、thunderbird-locale-sq、thunderbird-locale-sr、thunderbird-locale-sv-se、thunderbird-locale-sv、thunderbird-locale-ta-lk、thunderbird-locale-ta、thunderbird-locale-th、thunderbird-locale-tr、thunderbird-locale-uk、thunderbird-locale-uz、thunderbird-locale-vi、thunderbird-locale-zh-cn、thunderbird-locale-zh-hans、thunderbird-locale-zh-hant、thunderbird-locale-zh-tw、thunderbird-mozsymbols、thunderbird、xul-ext-calendar-timezones、xul-ext-gdata-provider、xul-ext-lightning 3. 软件包修复版本 ·银河麒麟桌面操作系统V10 SP1 1:78.14.0+build1-0kylin0.20.04.2k1 4. 修复方法 方法一：升级安装 执行更新命令进行升级 $sudo apt update $sudo apt install thunderbird 方法二：下载软件包进行升级安装 通过软件包地址下载软件包，使用软件包升级命令根据受影响的软件包列表升级相关的组件包。 $sudo dpkg -i /Path1/Package1 /Path2/Package2 /Path3/Package3…… 注：Path 指软件包下载到本地的路径，Package指下载的软件包名称，多个软件包则以空格分开。 5. 软件包下载地址 银河麒麟桌面操作系统V10 SP1 x86_64软件包下载地址 https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-gnome-support_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-af_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ar_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ast_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-be_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-bg_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-bn-bd_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-bn_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-br_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ca_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-cak_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-cs_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-cy_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-da_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-de_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-dsb_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-el_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-en-gb_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-en-us_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-en_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-es-ar_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-es-es_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-es_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-et_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-eu_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fa_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fi_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fr_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fy-nl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-fy_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ga-ie_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ga_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-gd_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-gl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-he_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-hr_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-hsb_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-hu_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-hy_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-id_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-is_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-it_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ja_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ka_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-kab_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-kk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ko_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-lt_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-mk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ms_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nb-no_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nb_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nn-no_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-nn_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pa-in_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pa_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pt-br_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pt-pt_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-pt_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-rm_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ro_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ru_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-si_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sl_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sq_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sr_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sv-se_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-sv_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ta-lk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-ta_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-th_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-tr_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-uk_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-uz_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-vi_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-zh-cn_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-zh-hans_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-zh-hant_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-locale-zh-tw_78.14.0%2Bbuild1-0kylin0.20.04.2k1_all.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird-mozsymbols_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/thunderbird_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/xul-ext-calendar-timezones_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/xul-ext-gdata-provider_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/t/thunderbird/xul-ext-lightning_78.14.0%2Bbuild1-0kylin0.20.04.2k1_amd64.deb 6. 修复验证 使用软件包查询命令，查看相关的软件包版本大于或等于修复版本则成功修复。 $sudo dpkg -l |grep Package 注：Package为软件包包名。