nginx-1.20.1-14.el9.1.ML.1
エラータID: AXSA:2023-6549:04
リリース日:
2023/10/27 Friday - 05:52
題名:
nginx-1.20.1-14.el9.1.ML.1
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- HTTP/2 プロトコルには、意図しないリソースの消費に至る問題がある
ため、リモートの攻撃者により、新規の多重ストリームのリクエストと
RST_STREAM フレームによるリクエストのキャンセルの送信を介して、
サービス拒否攻撃 (リソース枯渇) を可能とする脆弱性が存在します。
(CVE-2023-44487)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
追加情報:
N/A
ダウンロード:
SRPMS
- nginx-1.20.1-14.el9.1.ML.1.src.rpm
MD5: 75b1ff7f9bf474b61310d82e4f2c4c5a
SHA-256: b6e6f11482cf70527f2c0effd1eca0a616372979f2bb6a14d8a6bfb4bddf1e9f
Size: 1.06 MB
Asianux Server 9 for x86_64
- nginx-1.20.1-14.el9.1.ML.1.x86_64.rpm
MD5: 1b249496796a44d06cf9e722329a6a33
SHA-256: 2c74ab6d58a37b8893b697280313f440695f711e2bd3121b7cb2a751447270a9
Size: 35.87 kB - nginx-all-modules-1.20.1-14.el9.1.ML.1.noarch.rpm
MD5: 0ab92cd118cf7da83ecb26bd61ed7696
SHA-256: 3a1101283784a0f535fe0bea13724e3d7004fcdb094f7a8f6f371d54baf5fc54
Size: 7.55 kB - nginx-core-1.20.1-14.el9.1.ML.1.x86_64.rpm
MD5: 6264da79dc12b7c85ebfcca8ed98823b
SHA-256: 6ea16b1ef295e0bbb49c2b043a9ccae5efd0fb4abd5079528bf1b4ddd1ce4d78
Size: 565.43 kB - nginx-filesystem-1.20.1-14.el9.1.ML.1.noarch.rpm
MD5: 4fbfde7984c50ecd3e8de9f88d452f53
SHA-256: d61df4485097ecca07913d48cb2ffd095e44e9ebd2be3dda2dbcdb672729efd8
Size: 8.61 kB - nginx-mod-devel-1.20.1-14.el9.1.ML.1.x86_64.rpm
MD5: bfe0b7386c92678c8e5c0dc20911826b
SHA-256: b428b13afd4049c4b02cac8ebc1a719902f9292a50c149feaf75abb6d578690a
Size: 742.29 kB - nginx-mod-http-image-filter-1.20.1-14.el9.1.ML.1.x86_64.rpm
MD5: 10c682599fb4a51be973aaaeaf5fefab
SHA-256: eb44f694d614e4a33ab1c4a60078b40e395044028c3713612f1509cf93432e48
Size: 19.32 kB - nginx-mod-http-perl-1.20.1-14.el9.1.ML.1.x86_64.rpm
MD5: dd094483a43fd126b9137c6be917c3a1
SHA-256: 369a1e573dd83e92843ae6c421dd88d60d3b2300ee7eec89bdb09acfa2693d95
Size: 30.76 kB - nginx-mod-http-xslt-filter-1.20.1-14.el9.1.ML.1.x86_64.rpm
MD5: 8b2086a7eba8ef1930674e60be681d49
SHA-256: 4fcdcabc558f1d1adc454b19dcd3961b0fdcd28a1a22b9f7813ca4e7d901b986
Size: 17.99 kB - nginx-mod-mail-1.20.1-14.el9.1.ML.1.x86_64.rpm
MD5: 728ef44e7104c4ab4eb60295dd530a61
SHA-256: ce9cb07d753dacf720c98bd7b0c8ff4c2c0aef5dbf0e7bbed81366fe9495335f
Size: 51.66 kB - nginx-mod-stream-1.20.1-14.el9.1.ML.1.x86_64.rpm
MD5: 315dc6db7ca20496d810dc9d4f908717
SHA-256: 8bb5637294f92a55e354b76be4ace95685b0b5fb9c4db79968bd1e1ffe9c1c18
Size: 76.92 kB