cockpit-composer-45-1.el9, osbuild-composer-76-2.el9.ML.1, osbuild-81-1.el9.ML.1, weldr-client-35.9-1.el9
エラータID: AXSA:2023-5900:03
リリース日:
2023/06/07 Wednesday - 12:08
題名:
cockpit-composer-45-1.el9, osbuild-composer-76-2.el9.ML.1, osbuild-81-1.el9.ML.1, weldr-client-35.9-1.el9
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- go の net/http モジュールには、HTTP/2 接続のシャットダウン前に
致命的なエラーが発生した場合 HTTP/2 接続が無応答状態になる問題が
あるため、リモートの攻撃者により、サービス拒否攻撃を可能とする
脆弱性が存在します。(CVE-2022-27664)
- golang の Reader モジュールの Read 関数には、対象とするファイル
のヘッダーの最大サイズを制限していない問題があるため、リモートの
攻撃者により、細工されたアーカイブファイルによる無制限のメモリ
割り当てを介して、リソースの枯渇およびパニックの発生を可能とする
脆弱性が存在します。(CVE-2022-2879)
- golang には、リバースプロキシから転送されたクエリを含むリクエスト
の Go プロキシの処理に問題があるため、リモートの攻撃者により、
net/http モジュールによって拒否された解析不能なパラメーターを含む
リクエストを介して、HTTP リクエストスマグリング攻撃を可能とする
脆弱性が存在します。(CVE-2022-2880)
- golang の regexp モジュールには、信頼できない情報元から入力された
正規表現をコンパイルする際に大量のメモリを消費してしまう問題がある
ため、リモートの攻撃者により、細工された正規表現の入力を介して、
メモリの枯渇とそれに起因するサービス拒否攻撃を可能とする脆弱性が
存在します。(CVE-2022-41715)
- golang の net/http ライブラリには、大量のメモリを消費してしまう問題
があるため、リモートの攻撃者により、細工した HTTP/2 リクエストの
送信を介して、サービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2022-41717)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2022-27664
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
CVE-2022-2879
Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB.
Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB.
CVE-2022-2880
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparseable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparseable value. After fix, ReverseProxy sanitizes the query parameters in the forwarded query when the outbound request's Form field is set after the ReverseProxy. Director function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse query parameters continue to forward the original query parameters unchanged.
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparseable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparseable value. After fix, ReverseProxy sanitizes the query parameters in the forwarded query when the outbound request's Form field is set after the ReverseProxy. Director function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse query parameters continue to forward the original query parameters unchanged.
CVE-2022-41715
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
CVE-2022-41717
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.
追加情報:
N/A
ダウンロード:
SRPMS
- cockpit-composer-45-1.el9.src.rpm
MD5: 6e453af2c88dad0c50674d2a4f1127f0
SHA-256: 57a198dd8daeb732474b634c8aca64b16bd84a2859210f7ab452859d1f283260
Size: 3.12 MB - osbuild-composer-76-2.el9.ML.1.src.rpm
MD5: d39f92bf4e29bdfad12309e25de1e581
SHA-256: d15568ed68aa3c62fc424f3e8917acbadf5ab8fca1980ad416b9199985ded995
Size: 91.88 MB - osbuild-81-1.el9.ML.1.src.rpm
MD5: 193e221f44810e1c1873d218e18fccc9
SHA-256: fd91f3a1d16742c31657f03c4158174dbcfd329983d22db467ac19488b8f534e
Size: 4.55 MB - weldr-client-35.9-1.el9.src.rpm
MD5: c912fba204a1711668ec8fed87ea06b0
SHA-256: c578a7e82012a547377cdf72f722a7f8aaaf29cab5702f992ad4125c8577ebed
Size: 431.66 kB
Asianux Server 9 for x86_64
- cockpit-composer-45-1.el9.noarch.rpm
MD5: c37a669f15879ea48763ebf1f22f224c
SHA-256: 82f592aad5eaf0fe1668976358034ff255adf76a05760fa6b11c957a528de998
Size: 1.93 MB - osbuild-81-1.el9.ML.1.noarch.rpm
MD5: c9fd21e26b103df9d830eff7c7fbd887
SHA-256: 5c92d1222fa9f6ea0e501c35b3fcbb1a89c5066b8dd4bd9fc9a482f79e0a64bc
Size: 119.81 kB - osbuild-composer-76-2.el9.ML.1.x86_64.rpm
MD5: 33cf438e27baede12dd58acb42a6c859
SHA-256: 31f3da3ab845b3637fa2c4464a0bc40b15c59bcb94188b4643d2ad7a057141df
Size: 20.31 kB - osbuild-composer-core-76-2.el9.ML.1.x86_64.rpm
MD5: 91bb60521e64954486b82aefcc3c3b34
SHA-256: cf55a57dcfd080aff18d06a5eb5878a048ceab4d18f3893851d4fb1062ebb768
Size: 7.45 MB - osbuild-composer-dnf-json-76-2.el9.ML.1.x86_64.rpm
MD5: bf63c7701f36170b9da533d796746898
SHA-256: fc55c771b31010fe537b50da37d40c38f1433851830e28e72c3ce5ff6509fa57
Size: 14.62 kB - osbuild-composer-worker-76-2.el9.ML.1.x86_64.rpm
MD5: 113b0b6d200ad6c004747072d40a8c34
SHA-256: 3c24687795665b401a833d637f7acb3e9855a78c0749eea88cdf84fa5c19b56e
Size: 11.68 MB - osbuild-luks2-81-1.el9.ML.1.noarch.rpm
MD5: 6b906ec29c57185b1613df4c3ae899ae
SHA-256: 6a2c2bd94592a61b83e2773b964b37ea1cc2066ebee52009ac21132d3d68cd40
Size: 14.88 kB - osbuild-lvm2-81-1.el9.ML.1.noarch.rpm
MD5: 20e79a51b030bebfb267a76bf6080024
SHA-256: 63e40577d12fb83ba72e9ae3cba4a56dfc2f1f1dba2b1f7fb30f05fbd8af00a3
Size: 14.49 kB - osbuild-ostree-81-1.el9.ML.1.noarch.rpm
MD5: f0c63e6714a7f8c66e05772fad014bf2
SHA-256: d73522b41b08b74b59335ebc899d7e8f0ae9780e276e5478439a9aee052d1506
Size: 25.15 kB - osbuild-selinux-81-1.el9.ML.1.noarch.rpm
MD5: bfbec39aca0053a4c95e11dedf40c7c2
SHA-256: da8fcd50e0160ce5a54ad79fc2932e0977f8e3630bea0ecb01ddc73ca9566fba
Size: 26.72 kB - python3-osbuild-81-1.el9.ML.1.noarch.rpm
MD5: 7bf9a88c0de98cb70a7b205d2161e729
SHA-256: 2736263c8ef33381d5520e48181fa3902ef2aaa8224fb84c6a634d3ec3202721
Size: 182.50 kB - weldr-client-35.9-1.el9.x86_64.rpm
MD5: ead1e64bfce7191b3acc64682e7395d8
SHA-256: 12e88a12951543044d52cc2a3df2e9c09334cd36248e6ffe4d22698923db7881
Size: 2.95 MB
English