cockpit-composer-45-1.el9, osbuild-composer-76-2.el9.ML.1, osbuild-81-1.el9.ML.1, weldr-client-35.9-1.el9

エラータID: AXSA:2023-5900:03

Release date: 
Wednesday, June 7, 2023 - 12:08
Subject: 
cockpit-composer-45-1.el9, osbuild-composer-76-2.el9.ML.1, osbuild-81-1.el9.ML.1, weldr-client-35.9-1.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.

Security Fix(es):

* golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)
* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: net/[http:](http:) handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
* golang: net/[http:](http:) An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the MIRACLE LINUX 9.2 Release Notes linked from the References section.

CVE-2022-27664
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
CVE-2022-2879
Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB.
CVE-2022-2880
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparseable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparseable value. After fix, ReverseProxy sanitizes the query parameters in the forwarded query when the outbound request's Form field is set after the ReverseProxy. Director function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse query parameters continue to forward the original query parameters unchanged.
CVE-2022-41715
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
CVE-2022-41717
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. cockpit-composer-45-1.el9.src.rpm
    MD5: 6e453af2c88dad0c50674d2a4f1127f0
    SHA-256: 57a198dd8daeb732474b634c8aca64b16bd84a2859210f7ab452859d1f283260
    Size: 3.12 MB
  2. osbuild-composer-76-2.el9.ML.1.src.rpm
    MD5: d39f92bf4e29bdfad12309e25de1e581
    SHA-256: d15568ed68aa3c62fc424f3e8917acbadf5ab8fca1980ad416b9199985ded995
    Size: 91.88 MB
  3. osbuild-81-1.el9.ML.1.src.rpm
    MD5: 193e221f44810e1c1873d218e18fccc9
    SHA-256: fd91f3a1d16742c31657f03c4158174dbcfd329983d22db467ac19488b8f534e
    Size: 4.55 MB
  4. weldr-client-35.9-1.el9.src.rpm
    MD5: c912fba204a1711668ec8fed87ea06b0
    SHA-256: c578a7e82012a547377cdf72f722a7f8aaaf29cab5702f992ad4125c8577ebed
    Size: 431.66 kB

Asianux Server 9 for x86_64
  1. cockpit-composer-45-1.el9.noarch.rpm
    MD5: c37a669f15879ea48763ebf1f22f224c
    SHA-256: 82f592aad5eaf0fe1668976358034ff255adf76a05760fa6b11c957a528de998
    Size: 1.93 MB
  2. osbuild-81-1.el9.ML.1.noarch.rpm
    MD5: c9fd21e26b103df9d830eff7c7fbd887
    SHA-256: 5c92d1222fa9f6ea0e501c35b3fcbb1a89c5066b8dd4bd9fc9a482f79e0a64bc
    Size: 119.81 kB
  3. osbuild-composer-76-2.el9.ML.1.x86_64.rpm
    MD5: 33cf438e27baede12dd58acb42a6c859
    SHA-256: 31f3da3ab845b3637fa2c4464a0bc40b15c59bcb94188b4643d2ad7a057141df
    Size: 20.31 kB
  4. osbuild-composer-core-76-2.el9.ML.1.x86_64.rpm
    MD5: 91bb60521e64954486b82aefcc3c3b34
    SHA-256: cf55a57dcfd080aff18d06a5eb5878a048ceab4d18f3893851d4fb1062ebb768
    Size: 7.45 MB
  5. osbuild-composer-dnf-json-76-2.el9.ML.1.x86_64.rpm
    MD5: bf63c7701f36170b9da533d796746898
    SHA-256: fc55c771b31010fe537b50da37d40c38f1433851830e28e72c3ce5ff6509fa57
    Size: 14.62 kB
  6. osbuild-composer-worker-76-2.el9.ML.1.x86_64.rpm
    MD5: 113b0b6d200ad6c004747072d40a8c34
    SHA-256: 3c24687795665b401a833d637f7acb3e9855a78c0749eea88cdf84fa5c19b56e
    Size: 11.68 MB
  7. osbuild-luks2-81-1.el9.ML.1.noarch.rpm
    MD5: 6b906ec29c57185b1613df4c3ae899ae
    SHA-256: 6a2c2bd94592a61b83e2773b964b37ea1cc2066ebee52009ac21132d3d68cd40
    Size: 14.88 kB
  8. osbuild-lvm2-81-1.el9.ML.1.noarch.rpm
    MD5: 20e79a51b030bebfb267a76bf6080024
    SHA-256: 63e40577d12fb83ba72e9ae3cba4a56dfc2f1f1dba2b1f7fb30f05fbd8af00a3
    Size: 14.49 kB
  9. osbuild-ostree-81-1.el9.ML.1.noarch.rpm
    MD5: f0c63e6714a7f8c66e05772fad014bf2
    SHA-256: d73522b41b08b74b59335ebc899d7e8f0ae9780e276e5478439a9aee052d1506
    Size: 25.15 kB
  10. osbuild-selinux-81-1.el9.ML.1.noarch.rpm
    MD5: bfbec39aca0053a4c95e11dedf40c7c2
    SHA-256: da8fcd50e0160ce5a54ad79fc2932e0977f8e3630bea0ecb01ddc73ca9566fba
    Size: 26.72 kB
  11. python3-osbuild-81-1.el9.ML.1.noarch.rpm
    MD5: 7bf9a88c0de98cb70a7b205d2161e729
    SHA-256: 2736263c8ef33381d5520e48181fa3902ef2aaa8224fb84c6a634d3ec3202721
    Size: 182.50 kB
  12. weldr-client-35.9-1.el9.x86_64.rpm
    MD5: ead1e64bfce7191b3acc64682e7395d8
    SHA-256: 12e88a12951543044d52cc2a3df2e9c09334cd36248e6ffe4d22698923db7881
    Size: 2.95 MB