container-tools:4.0 security and bug fix update

エラータID: AXSA:2023-7321:01

リリース日: 
2023/12/27 Wednesday - 11:29
題名: 
container-tools:4.0 security and bug fix update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- Go の HTTP/1 クライアントには、Host ヘッダーの内容の検証が
不十分な問題があるため、リモートの攻撃者により、巧妙に細工
された Host ヘッダーを介して、リクエストの送信時にヘッダー
やリクエストの追加を可能とする脆弱性が存在します。
(CVE-2023-29406)

Modularity name: container-tools
Stream name: 4.0

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2023-29406
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. buildah-1.24.6-7.module+el8+1702+27bd7522.src.rpm
    MD5: 3577d36f91a67fec54357929ff9cc2ee
    SHA-256: 87437eabdde1d11628bb13d2c6ce9b3b92885f6cd0a0b34aba1a536d1345d03d
    Size: 13.27 MB
  2. cockpit-podman-46-1.module+el8+1702+27bd7522.src.rpm
    MD5: 1d376b7a6fa4daee947a6365c72edc32
    SHA-256: 469b38b1b2beb13e46d2556c43c87258eb078ad1bef9c03f15e9a2d171bf468e
    Size: 738.04 kB
  3. conmon-2.1.4-2.module+el8+1702+27bd7522.src.rpm
    MD5: b2df8a25648b2ff6eb6a90c31903b63a
    SHA-256: 6d9ef4427e1fb0c8a039e28d2b2ad954c4da4a369f08eaddaed14102492cbd02
    Size: 171.22 kB
  4. containernetworking-plugins-1.1.1-5.module+el8+1702+27bd7522.src.rpm
    MD5: 7f44ddabfc1dd9309ff4846ad92fb12b
    SHA-256: c59ef22d1ee5df8629a3e921340daa696b00bdf4ddf80c756e1b23f51e00db37
    Size: 2.80 MB
  5. containers-common-1-38.module+el8+1702+27bd7522.src.rpm
    MD5: 925f31ed3d4cff2e2315e06643b7b30e
    SHA-256: 9ac6ddf2c1eb6ec86d798057ffa0919945c57f7422f74507debc24e2b211bf79
    Size: 42.42 MB
  6. container-selinux-2.205.0-3.module+el8+1702+27bd7522.src.rpm
    MD5: 0eaa8a680abc4d98ac43068364e3a760
    SHA-256: 839a7a50afe6d311f3febd257ac8f74f1c967e4c946e496854b97928a86528b8
    Size: 59.75 kB
  7. criu-3.15-3.module+el8+1702+27bd7522.src.rpm
    MD5: 0055ab436b758348b3e10b40674d9443
    SHA-256: 09257dc2f2b018c09b0fde01508e44d292992913a34174da9496123514af221e
    Size: 914.17 kB
  8. crun-1.8.7-1.module+el8+1702+27bd7522.src.rpm
    MD5: 72d7f22ba186c80e676ed1c4031773da
    SHA-256: 34894e1c9bd58086c27aa59d145beb415c2ea64ea6d21b7e3ef219a91e0c1498
    Size: 1.66 MB
  9. fuse-overlayfs-1.9-2.module+el8+1702+27bd7522.src.rpm
    MD5: df8b4e18ce114c5f79bf6ac1eaddb4e1
    SHA-256: ead9ead0b2d95103d149869e2085c96044228bf41f12423ab20f854dd68a68f6
    Size: 115.67 kB
  10. libslirp-4.4.0-1.module+el8+1702+27bd7522.src.rpm
    MD5: 65784cb934ddfe26c0a3764ad6b8c8d6
    SHA-256: 00fbed100e94917278c564350876d4698c91a7a7ef9d0f542e2eaf6930da72af
    Size: 114.78 kB
  11. oci-seccomp-bpf-hook-1.2.5-2.module+el8+1702+27bd7522.src.rpm
    MD5: 6435d6b935cc6238f2389b9b083d8385
    SHA-256: e759d3bb9c1c11b0d60e9100c14a74a9c675263b17e8e4b4a0299057e49b995d
    Size: 1.20 MB
  12. podman-4.0.2-24.module+el8+1702+27bd7522.src.rpm
    MD5: 486932b3d20d5db97459d7204caa03c4
    SHA-256: 4f649353317461fdba2f5ece923678989f7b2fdbcb9ebbc94c14327d59118084
    Size: 16.83 MB
  13. python-podman-4.0.0-2.module+el8+1702+27bd7522.src.rpm
    MD5: ace7b2b58f0cfe7d88dd96cdaa37b3f3
    SHA-256: 3f2dc55eb4a5dbca09b7aaff799ebfcee7f5c25c1a5a8fe10bfd436d50868f07
    Size: 79.45 kB
  14. runc-1.1.5-2.module+el8+1702+27bd7522.src.rpm
    MD5: 86bad12a321a1db9e9d2ce62299f82af
    SHA-256: eed08e5296085cc397c6d080fcc690176f4d59cc807340d7917b821b50ed99d0
    Size: 2.22 MB
  15. skopeo-1.6.2-9.module+el8+1702+27bd7522.ML.1.src.rpm
    MD5: 1f7f9ba85789302e6a75a676ad27b68b
    SHA-256: 5958d90619e2404b264f801eb1236af20385a201caff4994394832e1ca02af5b
    Size: 6.19 MB
  16. slirp4netns-1.1.8-3.module+el8+1702+27bd7522.src.rpm
    MD5: b2905b4b0115c51a33545b6f4d12fa17
    SHA-256: 896ee58e2068f07c0b5de586a3a1db98efbf0e1bafb0b7dd5605057a6e1467b5
    Size: 69.55 kB
  17. toolbox-0.0.99.4-5.module+el8+1702+27bd7522.src.rpm
    MD5: 03eaf5360d70d4b79ad9458a72bd7b20
    SHA-256: d4f0fdd17178d3149a3202c48db393f55047a2a12d0d0ffc06365b31c0bb1cee
    Size: 2.25 MB
  18. udica-0.2.6-4.module+el8+1702+27bd7522.src.rpm
    MD5: 633dba5aef5ca082b70a790b0a4d9d80
    SHA-256: b86b73c91d572314e6f94756a30b4a941a426371738ff9749c4dac02dd991a1b
    Size: 134.00 kB

Asianux Server 8 for x86_64
  1. aardvark-dns-1.0.1-38.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 45dc040af22ca2f0159347a6955d7a64
    SHA-256: 2a5bf2918a27dcefb87787eedc926d3b22dfe09bea8e7a7473ef96b507206ec0
    Size: 1.01 MB
  2. buildah-1.24.6-7.module+el8+1702+27bd7522.x86_64.rpm
    MD5: cd23d2d17f54bf6c700a71682517b68f
    SHA-256: 4bcd0c7529c5343b99854ee7c5d83d9034ff3cd859cb539d7fa897d2fee057ff
    Size: 8.00 MB
  3. buildah-debugsource-1.24.6-7.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 99670cd4bb3abb229fbcedf859b79789
    SHA-256: e01795c1617bb6dcc40f0e833eb87bd27eee04f49a7feb7387d5af831acc3900
    Size: 3.29 MB
  4. buildah-tests-1.24.6-7.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 84ee19bae5a85c719fd3c4184ef88b77
    SHA-256: 19bb05fedb8d665830f0659f6504a93f3f3a60eb2115e5facdf51abd7e29ef4b
    Size: 18.06 MB
  5. cockpit-podman-46-1.module+el8+1702+27bd7522.noarch.rpm
    MD5: a028948c2556b80ec396c5bc3c6ede3b
    SHA-256: 750353ee06c3ee980de73ecda5773bfc9ef35404fa11eb04a20d749a31fb720b
    Size: 499.61 kB
  6. conmon-2.1.4-2.module+el8+1702+27bd7522.x86_64.rpm
    MD5: ee95f73375293f1a20af5ddc8805b8c8
    SHA-256: 59e1e818f9b2b265e7c8134e9c807f58feee1760fb6653e1968d3b86c4e6a542
    Size: 55.13 kB
  7. conmon-debugsource-2.1.4-2.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 63a7fe53aa11921d45f216f0f5017039
    SHA-256: a1200f86889a287f5bf5ec90e5f8172d9ed03d2fa899ea59cb431485a86d0366
    Size: 48.45 kB
  8. containernetworking-plugins-1.1.1-5.module+el8+1702+27bd7522.x86_64.rpm
    MD5: c96a4eb09c06c11c47d0430d5d077d02
    SHA-256: 9728c5deed221b2b8da21a48626dc512d457c64a89bc52a947190ebd898666e4
    Size: 19.08 MB
  9. containernetworking-plugins-debugsource-1.1.1-5.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 1e9747852468bca9cb5a7c44fe80a86d
    SHA-256: da880d4ad94dd62b0c00fbc149cad048dcbe682977a099a61a26a5363655fb8c
    Size: 376.11 kB
  10. containers-common-1-38.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 09473d78b09b60b911a65f2bdd4e5c67
    SHA-256: 30116c89141490c53f4853fae73d818dfe2616eb3a68d7c729a7dbca9b753daa
    Size: 105.56 kB
  11. container-selinux-2.205.0-3.module+el8+1702+27bd7522.noarch.rpm
    MD5: 8dcc30e2381ac2e395395a56964a51e8
    SHA-256: dea0e018553185999e62d09def76cfa6bb00d54787649c9cc300075a4321c1f9
    Size: 62.17 kB
  12. crit-3.15-3.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 49bc90fce22bbae7f94dbc129b77b10f
    SHA-256: 30dc710ee28a64b689f05a5d919f4f987cd3fcb2b356fcc14c8a03701ee26184
    Size: 18.59 kB
  13. criu-3.15-3.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 673ef1480322ff9a43cf59a39f456c22
    SHA-256: 5d77eda620f5d9aaa54339b0da6570a7107b18aac13d784c0bb64e3b2348737d
    Size: 516.60 kB
  14. criu-debugsource-3.15-3.module+el8+1702+27bd7522.x86_64.rpm
    MD5: a33a1dbcff4b8b3e6ac8074f97ec8753
    SHA-256: fcd1b214499e74f7ce3376802beb5976432cffd669c9ca1e066cb5275227864c
    Size: 675.29 kB
  15. criu-devel-3.15-3.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 97c411cdacde3f8ee1dd6e3489fe6107
    SHA-256: 55fe418ad3544f56362ba9e9758299b8cf1c91d20d7c4808e29352d1401dd0d5
    Size: 23.81 kB
  16. criu-libs-3.15-3.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 5890be6b497f9efb2f3bfd69a1775eda
    SHA-256: 3c9b4f909a70b071ab69bda95ac105a5d5593ac5009747a76906d55c86e1f64e
    Size: 36.66 kB
  17. crun-1.8.7-1.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 837875ae4edd450d902ba7e026be9638
    SHA-256: a7b8bfacbd497bc23e930cec6c1f69c602c8ba017c4d8e7eab2a4f927c40569b
    Size: 236.93 kB
  18. crun-debugsource-1.8.7-1.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 021d344bd83d2e7597fc583977665929
    SHA-256: fcae58aa770a7da343a0f36cab929bb367f03d9438d6cb789f2466eb00fe978e
    Size: 182.78 kB
  19. fuse-overlayfs-1.9-2.module+el8+1702+27bd7522.x86_64.rpm
    MD5: e3a51b015cd14b4bed53547f0d6f56a3
    SHA-256: 4f885a6aef3df477bee36eaa320992cb2ada31fb274771d25cf3fd93ecad4255
    Size: 72.26 kB
  20. fuse-overlayfs-debugsource-1.9-2.module+el8+1702+27bd7522.x86_64.rpm
    MD5: e37af1b2d75e175b4c534cf4618e57ad
    SHA-256: 78efca9de58a8e12a4ef88262f00e58b28b90647624e09a3b667ec25eafdd8b4
    Size: 54.21 kB
  21. libslirp-4.4.0-1.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 4bf51107a8a4c784a677b47722a47f2a
    SHA-256: bcf6a3b5754d6512114fa338203e55efe90270b84d597b1c54fe5981e50c04e8
    Size: 69.16 kB
  22. libslirp-debugsource-4.4.0-1.module+el8+1702+27bd7522.x86_64.rpm
    MD5: c4d31b71a2a0f23feeb4c484b5fbe018
    SHA-256: 8b6a64b3a1ff3803d12ceb8a0bdf2c25f30eb3c184b7835201edddd2c95ee076
    Size: 114.43 kB
  23. libslirp-devel-4.4.0-1.module+el8+1702+27bd7522.x86_64.rpm
    MD5: ff810aa36bfa25c49342107562feff9d
    SHA-256: 17a193759e7ed074c21e5118ad18963756cc945bde20b2bf1eaec8bb5f0125c8
    Size: 11.29 kB
  24. netavark-1.0.1-38.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 6af2a0287ba7f8d70f967eafe453c749
    SHA-256: 2ebac13c42b436ee975f266b8c9c10bf18d2617baa044409c6371e18a9c5dfe7
    Size: 2.06 MB
  25. oci-seccomp-bpf-hook-1.2.5-2.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 16d8e8b7ca750c2c742415d773e6911e
    SHA-256: 9dd39b76b240bb24b19243d170860f2c2f64c0cf38afc822ee4b3525dfceefee
    Size: 1.06 MB
  26. oci-seccomp-bpf-hook-debugsource-1.2.5-2.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 8aa10989ecd327c2a627bff24df9e7f5
    SHA-256: ecaf109e9e072889a2afdf727e388840e57470fb05124a1364e4ed10c903c784
    Size: 174.59 kB
  27. podman-4.0.2-24.module+el8+1702+27bd7522.x86_64.rpm
    MD5: a41ae3bfd136b4e273afc927ca9a2b52
    SHA-256: 0157926447e1b2409d6fc8cbb0d24a9229ca155ed752336f032e2c28e3dd7f87
    Size: 13.10 MB
  28. podman-catatonit-4.0.2-24.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 7e1995b631cfd180306d47e426b02e9f
    SHA-256: e5c45cb18074c809791690b7f23fe4cee31cbd1cc63c1ba67c498b99e90324c4
    Size: 355.01 kB
  29. podman-debugsource-4.0.2-24.module+el8+1702+27bd7522.x86_64.rpm
    MD5: a299afbce153b29719bb41c2edcebef3
    SHA-256: dbb85277535fa072ea4e85a3ed9f1cb30475447f57831fdf49580bc57633743e
    Size: 6.06 MB
  30. podman-docker-4.0.2-24.module+el8+1702+27bd7522.noarch.rpm
    MD5: 2c701900ad8c9aa1d70f06d08c02ef3a
    SHA-256: 9c4ed5d07ce2021f65102ddec9e788c18c4f1b3b25b968d525a287072833a655
    Size: 68.72 kB
  31. podman-gvproxy-4.0.2-24.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 20bf36bbb6caa297c67102aab70b8387
    SHA-256: 59d1bf2446fe03a7fc7a90344bd74c2522d636f621258478414703af398b1a4c
    Size: 3.73 MB
  32. podman-plugins-4.0.2-24.module+el8+1702+27bd7522.x86_64.rpm
    MD5: d4222fac9c2a67a5fde995dad6805934
    SHA-256: ca2be4db1d9ac7c46fa35ad3548db7f07d773a6930291edd73c9e883e76ecc01
    Size: 3.28 MB
  33. podman-remote-4.0.2-24.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 95304fd66cdbc4d9ad5c38b1db10e6be
    SHA-256: 5537a81d9ee161a76d3f61fddacd6bc274ec3f0970be8a04a8746aa5e1cdc7ce
    Size: 8.10 MB
  34. podman-tests-4.0.2-24.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 63ddaeea0f0c8b2d9f35836919a101db
    SHA-256: b4c32fd5d2c73bbd74807096058b0e5841bf32a1599869634718cef329f4f1d5
    Size: 176.15 kB
  35. python3-criu-3.15-3.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 3ce06e9e7281a1f7f18923d26a139a87
    SHA-256: 2f50505769dd0db193404407262db66b667c8de854e850890efe52f46f5694b2
    Size: 168.78 kB
  36. python3-podman-4.0.0-2.module+el8+1702+27bd7522.noarch.rpm
    MD5: 7b492f0e78819a71dce9b5608ee9e43f
    SHA-256: 056a16d113db94f8378e7037ecebf8b42bff6baa2c866d529886ed865519e7ac
    Size: 148.11 kB
  37. runc-1.1.5-2.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 5e247bce9f78151324dd9c3504763cfd
    SHA-256: 89d18296a9c18d28cf650974f11114199bf5b8861ee8f060d8b4bc60a84da74c
    Size: 3.08 MB
  38. runc-debugsource-1.1.5-2.module+el8+1702+27bd7522.x86_64.rpm
    MD5: a5908b29bffbe7f346717375ed72e5f1
    SHA-256: 1f00052dcf2c990a49fc5fbc02e701a9c4dcedc23988634df7e1e2420101c5fe
    Size: 868.28 kB
  39. skopeo-1.6.2-9.module+el8+1702+27bd7522.ML.1.x86_64.rpm
    MD5: c2494c35d1ce422a779fae8521363eee
    SHA-256: 92e87fc2d6cd3da7efcab8e54d55bf3f51228dd61335eb57fd3001b27451d047
    Size: 6.65 MB
  40. skopeo-debugsource-1.6.2-9.module+el8+1702+27bd7522.ML.1.x86_64.rpm
    MD5: 6d17f5439dfc581e82a565731c69318c
    SHA-256: 9fad4fb80fb2c26c6ba66d0573a39e65d6ab93855773a2015df466be22150934
    Size: 2.49 MB
  41. skopeo-tests-1.6.2-9.module+el8+1702+27bd7522.ML.1.x86_64.rpm
    MD5: f162434f2a28d9ec359d01dad9f60c1c
    SHA-256: f7a23031a73e78f86fa732aca049c101e501b449a6f2c764d64df6de2d6b9f0f
    Size: 780.29 kB
  42. slirp4netns-1.1.8-3.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 49265d378a0118eec22ebc30c848623b
    SHA-256: fb1321ff113e0b88a459ee5dae0f951e18fab1c2100f85210e8559cffe637f20
    Size: 50.29 kB
  43. slirp4netns-debugsource-1.1.8-3.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 9fe6fd066e7f2e2d1d3c36426024a875
    SHA-256: 24c837986b372cc9085d26ab9fc1216649ddddbbb731729d6705d7ffa1a9d14e
    Size: 38.88 kB
  44. toolbox-0.0.99.4-5.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 3e7e52cb5f278bbb28f3934878ea7277
    SHA-256: 6eba009ebb40548487217361d456affd292bc731b1b61f2743cd2821b7fb93f5
    Size: 2.53 MB
  45. toolbox-debugsource-0.0.99.4-5.module+el8+1702+27bd7522.x86_64.rpm
    MD5: 84d65e394605ed83341b50cbcf52c26d
    SHA-256: 00ff9831f6aa22d03f43c0e37bbb381b96fd722a0b7c98697c1429073b689c38
    Size: 559.42 kB
  46. toolbox-tests-0.0.99.4-5.module+el8+1702+27bd7522.x86_64.rpm
    MD5: ad6705ed6ea603f0fe4ccfc2d8bd751b
    SHA-256: 80f2e1e7fa21991607e82f13991ce02c38d94675429cfd04a0da001aee6aac01
    Size: 37.48 kB
  47. udica-0.2.6-4.module+el8+1702+27bd7522.noarch.rpm
    MD5: 27c5cb11f65055bcc518c7d81507e2ee
    SHA-256: cffd18f5c45d204d1ce69211d526ac402887d6c1923339c9c2affaf8611c32fd
    Size: 48.04 kB