pcs-0.10.18-2.el8_10.9.ML.1
エラータID: AXSA:2026-468:04
リリース日:
2026/04/21 Tuesday - 09:38
題名:
pcs-0.10.18-2.el8_10.9.ML.1
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- tornado-python には、リソースの制限を実施していない問題が
あるため、リモートの攻撃者により、サービス拒否攻撃 (リソース枯渇)
を可能とする脆弱性が存在します。(CVE-2026-31958)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-31958
Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the main thread, this creates the possibility of denial-of-service due to the cost of parsing very large multipart bodies with many parts. This vulnerability is fixed in 6.5.5.
Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the main thread, this creates the possibility of denial-of-service due to the cost of parsing very large multipart bodies with many parts. This vulnerability is fixed in 6.5.5.
追加情報:
N/A
ダウンロード:
SRPMS
- pcs-0.10.18-2.el8_10.9.ML.1.src.rpm
MD5: b99a4aeb8310e796d6f81facc84c7d05
SHA-256: 3267149b9a5caaeb4752098011794a7040bd56c35f14b378ccf088d6b8810c48
Size: 5.17 MB
Asianux Server 8 for x86_64
- pcs-0.10.18-2.el8_10.9.ML.1.x86_64.rpm
MD5: 8e5e36626d0a81c9c5d4a051d6e67e2b
SHA-256: e8ba1285dd403936e95a266f9cf10a34146ea420860f2d846b35709153afbf20
Size: 4.11 MB - pcs-snmp-0.10.18-2.el8_10.9.ML.1.x86_64.rpm
MD5: 56396396fb0554a94fa87aa0a0c2fcb6
SHA-256: c33b0f264cb6e760e01738b96eb3716cd935766b657455a076b1ce4188a5a242
Size: 82.17 kB
English