httpd-2.4.57-5.el9

エラータID: AXSA:2023-6899:07

リリース日: 
2023/12/12 Tuesday - 10:00
題名: 
httpd-2.4.57-5.el9
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- Apache HTTP Server の mod_proxy_uwsgi モジュールには、
リモートの攻撃者により、HTTP レスポンススマグリング攻撃
を可能とする脆弱性が存在します。(CVE-2023-27522)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2023-27522
HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. httpd-2.4.57-5.el9.src.rpm
    MD5: 25fb350b58e3584019fe0f76210cc917
    SHA-256: 486069a6a138a0ec05cf06486de9d00d50b2641e327202172ca6784b9626e489
    Size: 7.57 MB

Asianux Server 9 for x86_64
  1. httpd-2.4.57-5.el9.x86_64.rpm
    MD5: d27c6f1941c45f4509c1def03bacffd6
    SHA-256: dcd9bd22491c3dfd44f1ac46d8119193b214dfa2c749a8a4c99ca0592b983978
    Size: 45.86 kB
  2. httpd-core-2.4.57-5.el9.x86_64.rpm
    MD5: 5661e894fe8aba4d12ea90972c15501d
    SHA-256: 31a97fc6a104fe980612d1bae9480d5df66334b2685c0ee084948681277aee9a
    Size: 1.37 MB
  3. httpd-devel-2.4.57-5.el9.x86_64.rpm
    MD5: b888b96062be8ff5d8e048af22c11fdd
    SHA-256: a92dfa6b754d237b539d874768039b682b0285675b630fd6d6ec2e03b28765c0
    Size: 191.49 kB
  4. httpd-filesystem-2.4.57-5.el9.noarch.rpm
    MD5: 8c7f43c9ea3236ac7e864f50f2758e63
    SHA-256: de8c1da07d48da8a8baed17fe18fa2d808a3b86cae8944a9e0973f6b2d2f311f
    Size: 12.39 kB
  5. httpd-manual-2.4.57-5.el9.noarch.rpm
    MD5: bf39cc7fb97281e1f154a7a6ccd21177
    SHA-256: 084cceb44d72ab3bd43346ebfd089bd21e29245e6a889c7cdd685f5f8c47a7c9
    Size: 2.23 MB
  6. httpd-tools-2.4.57-5.el9.x86_64.rpm
    MD5: 3d85d909f39004cb81371856b8a853fd
    SHA-256: a47cb0972b412c30dda114964dd661706a44d56611d390bb20c29ff3ae6ea863
    Size: 79.80 kB
  7. mod_ldap-2.4.57-5.el9.x86_64.rpm
    MD5: a92554028844ca284b5603c81ab47149
    SHA-256: a929669b9801de6a15a71052e4d6c3be8d0736df77e18c21e268762333367a18
    Size: 60.57 kB
  8. mod_lua-2.4.57-5.el9.x86_64.rpm
    MD5: 0c5b2e85e7acbaa0cc57faed092c34cd
    SHA-256: 9312e84d06ce9b61792b35369474d1dc6b409dec0d3cffc7806d000fe6d56399
    Size: 59.74 kB
  9. mod_proxy_html-2.4.57-5.el9.x86_64.rpm
    MD5: 034d7740015657b890f664daeb135706
    SHA-256: 0036feb1960a75ec04ef6870d39e117bdd9ed4582cde5f36e73dfe7c3859516d
    Size: 35.31 kB
  10. mod_session-2.4.57-5.el9.x86_64.rpm
    MD5: 70b40df300dcc91c2c191d56bb2bef86
    SHA-256: b1be1e0f7501a4105f476e90300aa932b8ab963dc7407d65821b83c95c8715d6
    Size: 47.16 kB
  11. mod_ssl-2.4.57-5.el9.x86_64.rpm
    MD5: 6274a08a974de7f361089487e67b017e
    SHA-256: 193e00f39af184c6d7678f2e0a75ab470cbb8334e7565bfef0dd1eda3773db3f
    Size: 109.52 kB