pcs-0.10.14-5.el8.2.ML.1
エラータID: AXSA:2023-5163:05
リリース日:
2023/02/27 Monday - 04:37
題名:
pcs-0.10.14-5.el8.2.ML.1
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- Sinatra には、リモートの攻撃者により、細工したファイル名の
入力を介して、レスポンスの Content-Disposition ヘッダーを
用いたリフレクトファイルダウンロード攻撃を可能とする脆弱性が
存在します。(CVE-2022-45442)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2022-45442
Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.
Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.
追加情報:
N/A
ダウンロード:
SRPMS
- pcs-0.10.14-5.el8.2.ML.1.src.rpm
MD5: b72435556a2fe243af8fc1d94183fa8a
SHA-256: 9100b9f69e63359573a0744b20f0f1df284295ac05816f1fc9eab0a514920c8e
Size: 70.61 MB
Asianux Server 8 for x86_64
- pcs-0.10.14-5.el8.2.ML.1.x86_64.rpm
MD5: 3df82232a7821ca9b6dffbb35dd981a7
SHA-256: 1ef42ca52734624fa18edd8402dd9e2b0309c960bfaa3c6cd53a7cf969d181f1
Size: 10.08 MB - pcs-snmp-0.10.14-5.el8.2.ML.1.x86_64.rpm
MD5: f983f7a84b4be75106a14efa22e06356
SHA-256: 32e2299df8c35da36f1c943c04b3b2368c9e07b6284ee083a5eb67d87bd3c696
Size: 75.94 kB
English