osbuild-composer-165.1-4.el9_8.ML.1
エラータID: AXSA:2026-1675:09
リリース日:
2026/08/27 Thursday - 14:09
題名:
osbuild-composer-165.1-4.el9_8.ML.1
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Golang の crypto/x509 ライブラリおよび crypto/tls ライブラリ
には、証明書チェーンの構築処理においてリソースの制限を実施して
いない問題があるため、リモートの攻撃者により、サービス拒否攻撃
(リソース枯渇) を可能とする脆弱性が存在します。(CVE-2026-32280)
- Golang の crypto/x509 には、ループ内で過剰にプラットフォーム
リソースを消費してしまう問題があるため、リモートの攻撃者により、
サービス拒否攻撃 (DoS) サービス拒否攻撃を可能とする脆弱性が存在
します。(CVE-2026-32281)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-32280
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
CVE-2026-32281
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
追加情報:
N/A
ダウンロード:
SRPMS
- osbuild-composer-165.1-4.el9_8.ML.1.src.rpm
MD5: e859848503e407067575ddc67e26a896
SHA-256: 1f4a65e9c0229f85281e2a554dad5819cb4b03dfe3f8a2f77da4526bcfccb14b
Size: 23.44 MB
Asianux Server 9 for x86_64
- osbuild-composer-165.1-4.el9_8.ML.1.x86_64.rpm
MD5: 83ab830e8d732cea099b4cd587030bbb
SHA-256: 0d136fc876d386b937c299b487c69321911f1b7ac69ba7cfefd1544ca4587c93
Size: 21.45 kB - osbuild-composer-core-165.1-4.el9_8.ML.1.x86_64.rpm
MD5: 5b60c6f892e7191a6bc3278bafb6623b
SHA-256: 295f322f5eea571a29ff41a646a4e8d416a8b67ce78a621ef0dd0db964b8b3fe
Size: 15.68 MB - osbuild-composer-worker-165.1-4.el9_8.ML.1.x86_64.rpm
MD5: 439783c43236ea1fef4f6286e26fc323
SHA-256: 1ff09c7aa0091ed5ab6a95c84c66e587024b7cfe7b8a74764496f5c42fb3bf08
Size: 33.98 MB
English