エラータID: AXSA:2021-1338:01

Release date: 
Friday, January 29, 2021 - 10:07
Affected Channels: 
Asianux Server 8 for x86_64

Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover all system management aspects.

Security Fix(es):

* openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.


Update packages.

Additional Info: 



  1. openwsman-2.6.5-7.el8.src.rpm
    MD5: 23b2d2aeafae68f4341dcce7deffdf99
    SHA-256: 3e7583515a04a5aa5c1931f2d03c4b7dc2a5d9796455df9cfdad589971a2ec8e
    Size: 528.04 kB

Asianux Server 8 for x86_64
  1. libwsman1-2.6.5-7.el8.x86_64.rpm
    MD5: f7a6849d3d3c564040d4ec4befbe8fd9
    SHA-256: 50dd7eedbed542b3db4df9aa49a3683b339c542d57775f82d8d281233277c0f0
    Size: 140.69 kB
  2. openwsman-client-2.6.5-7.el8.x86_64.rpm
    MD5: e3fde7a16699c906539d9214507e8b87
    SHA-256: ca8b67c7f130e059c790fabf100a0a110f1d1788992beeee47091956b6ad61b5
    Size: 51.67 kB
  3. openwsman-python3-2.6.5-7.el8.x86_64.rpm
    MD5: af52d8d57146e296a53e327c60135546
    SHA-256: c9de7c0be0cf5d3f330f4c06af95ddb88e11e96963999cc3be16400810e3072b
    Size: 120.96 kB
  4. openwsman-server-2.6.5-7.el8.x86_64.rpm
    MD5: 8fbb86b149ffba55699992960b3acfaa
    SHA-256: a2ec8051055d1da6958956cbc694a750e55c11a354c07dd76f7ed5c5b1af8f62
    Size: 176.98 kB
  5. libwsman1-2.6.5-7.el8.i686.rpm
    MD5: 5f8e3043f687939a92d0e5d0c20b7582
    SHA-256: 262060418a15c7216b26fdc760b6907059c9750918f9d4bf9048936d70338174
    Size: 153.12 kB
  6. openwsman-client-2.6.5-7.el8.i686.rpm
    MD5: 178164098bb331000913123dfe59a440
    SHA-256: cd6eb5c45c43f6525956d25898fe387a8a46d4784eaa2e73c335aee02a64064e
    Size: 53.14 kB
  7. openwsman-server-2.6.5-7.el8.i686.rpm
    MD5: a6d3617cac0043d8462c91a80312cbbc
    SHA-256: 6d17bafa39b0d262147000ceed986f67d52aab6970d27544c02dca7346a3b539
    Size: 184.08 kB