pcs-0.10.18-2.el8_10.4.ML.1
エラータID: AXSA:2025-9779:02
リリース日:
2025/03/19 Wednesday - 17:13
題名:
pcs-0.10.18-2.el8_10.4.ML.1
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Tornado の HTTP クッキー解析処理は、意図せず CPU リソース
を過剰消費してしまう問題があるため、リモートの攻撃者により、
サービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2024-52804)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2024-52804
Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in the event loop thread and may block the processing of other requests. Version 6.4.2 fixes the issue.
Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in the event loop thread and may block the processing of other requests. Version 6.4.2 fixes the issue.
追加情報:
N/A
ダウンロード:
SRPMS
- pcs-0.10.18-2.el8_10.4.ML.1.src.rpm
MD5: 6a7d9836de1c06904997ccc49b75748f
SHA-256: 56d5c3e8a879c90b926a942bf170b64953a6deaab143a49264847847e743b25b
Size: 5.17 MB
Asianux Server 8 for x86_64
- pcs-0.10.18-2.el8_10.4.ML.1.x86_64.rpm
MD5: 3dbf43f1059395fa2227bee481fa2333
SHA-256: 2bdbec5abb8d5b4b5ea9db3d190dec064a2e5a9bececa19fd5f97517de4fcf59
Size: 4.11 MB - pcs-snmp-0.10.18-2.el8_10.4.ML.1.x86_64.rpm
MD5: af5a74e090be835034517c4f8b6752be
SHA-256: a67a00be9736f923eed1c0789161b8ef36c377f1412e93e6d68e2adef96b585b
Size: 81.26 kB
English