cockpit-composer-41-1.el8, osbuild-composer-62-1.el8.ML.1, osbuild-65-1.el8.ML.2, weldr-client-35.5-4.el8

エラータID: AXSA:2023-4757:01

リリース日: 
2023/01/17 Tuesday - 00:53
題名: 
cockpit-composer-41-1.el8, osbuild-composer-62-1.el8.ML.1, osbuild-65-1.el8.ML.2, weldr-client-35.5-4.el8
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- go の math/big モジュールの Float 型および Rat 型を
レシーバー とする GobDecode 関数には、パニックの発生に
至る問題があるため、リモートの攻撃者により、短すぎる
入力データを介して、サービス拒否攻撃を可能とする脆弱性が
存在します。(CVE-2022-32189)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2022-32189
A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. cockpit-composer-41-1.el8.src.rpm
    MD5: ba5b66a9486f02f83b5e87b3a1aed713
    SHA-256: 2238eb0601723fd07fcc7a85c273abefbbbe84b1f839386cb3c6a8b1fe9b7915
    Size: 2.84 MB
  2. osbuild-composer-62-1.el8.ML.1.src.rpm
    MD5: 02745ccb8343245b05ed89df50786696
    SHA-256: b8424fe6f79df73878697eb1f56298a9095c23660c3f4cc49c0c556f5ea2c7a4
    Size: 63.40 MB
  3. osbuild-65-1.el8.ML.2.src.rpm
    MD5: 9fe93123cae8e116a21795fc79ca580d
    SHA-256: 1357f40b43a7db0110fcee8ae9a38c72162e25e5ba51e99eb82d2ffbeca51b3c
    Size: 4.09 MB
  4. weldr-client-35.5-4.el8.src.rpm
    MD5: d1569bb7d6f5f888978892fcd39a8a56
    SHA-256: 0ac9776da11847fa1a7bf9cf91daefd22d6bb378fb65ff41adf042b702723aae
    Size: 516.56 kB

Asianux Server 8 for x86_64
  1. cockpit-composer-41-1.el8.noarch.rpm
    MD5: 103180588e191ffb4c87f119e70abe58
    SHA-256: f75a99ebfed8f9d231ab6051634e1ca4afed1cfc1b8cc8742a537158d2d8c1dc
    Size: 1.98 MB
  2. osbuild-composer-62-1.el8.ML.1.x86_64.rpm
    MD5: 6e628bf27d35ab48bfb8c84595ea8e9c
    SHA-256: fde097d9c9467b0b49cf980bac218cc4429087681b4a797712fa31645725b6c3
    Size: 19.53 kB
  3. osbuild-composer-core-62-1.el8.ML.1.x86_64.rpm
    MD5: d230a7d2e0ef7d2902ec623f87ff9262
    SHA-256: 8178fd5a277d0af0c413ffa6a2d62948b47a5f537fbfbd89d1d16f814bf7b274
    Size: 7.41 MB
  4. osbuild-composer-dnf-json-62-1.el8.ML.1.x86_64.rpm
    MD5: 1a2875fabdf1501effacf0767b152fa0
    SHA-256: f3eb45210c3515db62c864bc67340b097475b0cbb67402b71a88f24a0b6ec9c0
    Size: 13.55 kB
  5. osbuild-composer-worker-62-1.el8.ML.1.x86_64.rpm
    MD5: 6dd0e3716702f3760da688d45d44183f
    SHA-256: 88469827da776c7ccad912ca0ee21aff7fdf132659be008101387be601138000
    Size: 11.27 MB
  6. osbuild-65-1.el8.ML.2.noarch.rpm
    MD5: e2dbdce62709b1fa960b757cdac9b04a
    SHA-256: 824a3034d2ed64eadd330ffe3e999764e186bb08cde50646c2b6eafba1df0a36
    Size: 127.26 kB
  7. osbuild-luks2-65-1.el8.ML.2.noarch.rpm
    MD5: 86dd8d02947b261a8b4ed958f04142ab
    SHA-256: d6c4407c5afe4cbd9b4618d4bfb3d957091c27bcb211b80717eb11e2e7a68595
    Size: 17.16 kB
  8. osbuild-lvm2-65-1.el8.ML.2.noarch.rpm
    MD5: 72a14564f0f3c489f6196e60d882ef88
    SHA-256: 696ee962cd73b43fd2e6893d656178237f38a9e406c351848a1ebacb51b29976
    Size: 16.78 kB
  9. osbuild-ostree-65-1.el8.ML.2.noarch.rpm
    MD5: 2d0a04fde96fc05f1b6c3697058af678
    SHA-256: a050977d4b43e5d1e40fb76f06ef27e0424951a8e82f6183ad5e870ee601dd48
    Size: 26.95 kB
  10. osbuild-selinux-65-1.el8.ML.2.noarch.rpm
    MD5: dc2e13cea21ab1269bc385ed15679772
    SHA-256: 04bace1aa54f981645b6cfbe754a7cbf0861a59d6d99eb3224adbbb6bc5fe73f
    Size: 27.80 kB
  11. python3-osbuild-65-1.el8.ML.2.noarch.rpm
    MD5: e90f4dc6b31efad6bc4403674d420da7
    SHA-256: df5981365083f8ff37d9b0b6debe0975a9cf569db2b54e5c07473f7e6182e9ef
    Size: 157.74 kB
  12. weldr-client-35.5-4.el8.x86_64.rpm
    MD5: b91f0806ec3eed34317fa36adb357e98
    SHA-256: 77daea5431537705a2882a0fdb85781472eafcf9d3f5f3b2e5282861ce0999d4
    Size: 2.69 MB