device-mapper-multipath-0.4.9-136.el7

エラータID: AXSA:2022-3922:04

Release date: 
Wednesday, October 26, 2022 - 00:26
Subject: 
device-mapper-multipath-0.4.9-136.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-41974
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. device-mapper-multipath-0.4.9-136.el7.src.rpm
    MD5: 6e3c5b565e9be3e5a63747ff5d5553d7
    SHA-256: 3ab0f687d60597fe4769bd457ae356bd1cf6bed336d3d5ae4778bf29ba75b9fd
    Size: 702.95 kB

Asianux Server 7 for x86_64
  1. device-mapper-multipath-0.4.9-136.el7.x86_64.rpm
    MD5: fa712602c581371e90537d6155a6d5bc
    SHA-256: 52053c94953cbe7b441b77ae9be537eaf5c3e7763362bcc0b65a0a2b74e8162a
    Size: 147.21 kB
  2. device-mapper-multipath-libs-0.4.9-136.el7.x86_64.rpm
    MD5: e47024d0177f141feb6cd9c18cb418ac
    SHA-256: ce2261350bdf0a8e234041a0e66b02ceee835e0a0eee606ad438d8d9233031d8
    Size: 266.98 kB
  3. kpartx-0.4.9-136.el7.x86_64.rpm
    MD5: b923364e4fd8769a01dcc709578aeccc
    SHA-256: 3c216d39de8a68a114f551c8981d4719fdfddd4c6a399986afa7350b7e233ad3
    Size: 79.96 kB
  4. device-mapper-multipath-libs-0.4.9-136.el7.i686.rpm
    MD5: 9132d9edf01608dc8a7f0d852fe99a79
    SHA-256: 99c77ec5d99cfc425431ffcf9561ded175710d4d1e804ab4d070c8653dacb283
    Size: 267.18 kB