gnutls-3.7.6-12.el9, nettle-3.8-3.el9

エラータID: AXSA:2022-4094:01

リリース日: 
2022/11/18 Friday - 12:44
題名: 
gnutls-3.7.6-12.el9, nettle-3.8-3.el9
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- gnutls の gnutls_pkcs7_verify 関数には、メモリ領域の二重解放の問題
があるため、リモートの攻撃者により、クラッシュの発生とそれに起因
するサービス拒否攻撃を可能とする脆弱性が存在します。(CVE-2022-2509)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2022-2509
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. gnutls-3.7.6-12.el9.src.rpm
    MD5: a4128e9fbcdf48c77965b13f3f88a1e5
    SHA-256: 9a0b3340c4f3a68c63c997a6de49cdb3121ca3378a3dd79dd225f3ee4e840975
    Size: 8.09 MB
  2. nettle-3.8-3.el9.src.rpm
    MD5: 3f097c26379dceb3f96d942cedb04fb6
    SHA-256: d3ad45a7c00e514a5097aa27839d803d030b0a3b25ee30c837c00f6a7dff2b02
    Size: 3.97 MB

Asianux Server 9 for x86_64
  1. gnutls-3.7.6-12.el9.x86_64.rpm
    MD5: 6deeedfe45bbc7f33dcbf8843aa605ac
    SHA-256: 60e334ccf40977698b02ffb8892b81352cdf4422f67f59dba814c3fb538e0f1b
    Size: 1.04 MB
  2. gnutls-c++-3.7.6-12.el9.x86_64.rpm
    MD5: fa0b3cdc19606be056abb0e6e887816c
    SHA-256: 68cc3a17d6b857dc9f178b924516e85862b76d972af85866b92a063ce7100259
    Size: 33.58 kB
  3. gnutls-dane-3.7.6-12.el9.x86_64.rpm
    MD5: 2a2d8b9beb49d1331d8431cafd4938c3
    SHA-256: beb0a840554f4f692f1137707b837fa78f14df707ade019e451e38a2959805aa
    Size: 23.05 kB
  4. gnutls-devel-3.7.6-12.el9.x86_64.rpm
    MD5: e2b858cacf790d2004cba8e63626a3e1
    SHA-256: 5aa5bda5afd2718fa8e7a4ad7531492f32bae02dba739804011316da735e0472
    Size: 2.18 MB
  5. gnutls-utils-3.7.6-12.el9.x86_64.rpm
    MD5: efe96262b9c66e8df32ead9fb8079f30
    SHA-256: da53dbfb7490840c168068fdb6a6f6672c109fa1fb639e182bcc796a83b53b83
    Size: 265.49 kB
  6. nettle-3.8-3.el9.x86_64.rpm
    MD5: bca128310a216e1f291c3b644d70184c
    SHA-256: 20a485a27352383f0a6016cde2101cb5f0acd20b1f740e019905b23b7a06309a
    Size: 546.72 kB
  7. nettle-devel-3.8-3.el9.x86_64.rpm
    MD5: 1f9453841b1e44235ccbab89b43a61af
    SHA-256: 84101b085617fb87bcc8561fee5dfb156bb2e3d7ac4bca7bcd6c573551f9cf80
    Size: 660.65 kB
  8. gnutls-3.7.6-12.el9.i686.rpm
    MD5: 626c52b8b44994ff866dcc580c761369
    SHA-256: 1bcac083f61f38277fde61759c9fe0ed0762d1fc0cb1fac0538da2f447fc3711
    Size: 1.03 MB
  9. gnutls-c++-3.7.6-12.el9.i686.rpm
    MD5: 5720c8ce4905907d26944577890c25ae
    SHA-256: 524dda3a721ea3a34b0f9064f0639467f6579ab8dc114c2abe649d3ab24c5d09
    Size: 34.56 kB
  10. gnutls-dane-3.7.6-12.el9.i686.rpm
    MD5: 33fe820ebfa746e6da46f83c8e79b299
    SHA-256: fc4c41fa666c16d144ec9a4c1e4d1edc4513273e8fd9a7fd966302fe032d7786
    Size: 23.24 kB
  11. gnutls-devel-3.7.6-12.el9.i686.rpm
    MD5: d693629d845e4000fe601ec76111919c
    SHA-256: 82d64c2f999c8b3e7349a1e456603db4eb80958a29121798cccf6aaf4f9370e9
    Size: 2.18 MB
  12. nettle-3.8-3.el9.i686.rpm
    MD5: 3728aeb8daf8c16b315936ec080329b7
    SHA-256: 412f244662ebde18e862424d06c70a52f60393f1e07d5463b16fef4f2595c80c
    Size: 542.91 kB
  13. nettle-devel-3.8-3.el9.i686.rpm
    MD5: b6488f95d5f88dbaba12d33aa4b1084b
    SHA-256: 311b7c1a369f91f748811082c6abf8db0550c278492758967fbb9f84151c5089
    Size: 660.65 kB