qpid-tools-0.14-6.AXS4, qpid-qmf-0.14-14.AXS4, qpid-cpp-0.14-22.AXS4, python-qpid-0.14-11.AXS4

エラータID: AXSA:2012-1014:04

リリース日: 
2012/12/13 Thursday - 13:58
題名: 
qpid-tools-0.14-6.AXS4, qpid-qmf-0.14-14.AXS4, qpid-cpp-0.14-22.AXS4, python-qpid-0.14-11.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]

- Apache Qpid は、クライアント接続を適切に制限しないため、多数の不完全な接続によって、サービス拒否 (ファイル記述子の消費) を引き起こす脆弱性が存在します。(CVE-2012-2145)

一部 CVE の翻訳文は JVN からの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2012-2145
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.


追加情報: 

N/A

ダウンロード: 

SRPMS
  1. python-qpid-0.14-11.AXS4.src.rpm
    MD5: 1117f40b479a1b442a0768ebebe0fc30
    SHA-256: 7ff97705c7ac9ff89fcad2ffb877179103458f832ff0b2e3664748e68282d271
    Size: 245.16 kB
  2. qpid-cpp-0.14-22.AXS4.src.rpm
    MD5: 7ffbfc49f6aa2772fe413305b194060a
    SHA-256: 5dc536319d047896c8b50c34d593402181eb5fc9bca733eaacc2c3429a65db38
    Size: 47.33 MB
  3. qpid-qmf-0.14-14.AXS4.src.rpm
    MD5: 85ffd68b7aa7f334b36ad6295182be35
    SHA-256: fa4699a7b435262a7cca987f0e81fc237e742c26ce7debac62e0be3c34979085
    Size: 45.26 MB
  4. qpid-tools-0.14-6.AXS4.src.rpm
    MD5: cb19dde9bf59ebca2cb46a8ad9ee52bf
    SHA-256: 9b4fee49bfa580f44e3c11dcfa4fce75fcb21aaa20b5501e2f6906262eb5ffd7
    Size: 48.84 kB

Asianux Server 4 for x86
  1. python-qpid-0.14-11.AXS4.noarch.rpm
    MD5: b3d26e737c90ff0b5572cce6819290f1
    SHA-256: 12d6fe44644f84a553aa15aed28cfed9cb514c3dcaebaca368cc025cf0e546b7
    Size: 409.22 kB
  2. qpid-cpp-client-0.14-22.AXS4.i686.rpm
    MD5: 72ee698e0d54f57b6a24ea5591a87fb9
    SHA-256: e78dc5ff1d380547e26e4b9681df0d9c3009d9e3de55108437d5e92deca10a91
    Size: 1.01 MB
  3. qpid-cpp-client-ssl-0.14-22.AXS4.i686.rpm
    MD5: 48fa83f6fc9a6c2055bb9eb44bd8d718
    SHA-256: 172466d26bd3e83365d5343b62f35b289c3739dcb56d4984409aa079dca7f0af
    Size: 110.53 kB
  4. qpid-cpp-server-0.14-22.AXS4.i686.rpm
    MD5: 04c6225996bb1fb56e8dcdf0d3a57301
    SHA-256: de70b6ac72efb93af3b18c0ca7f448783b831ba238ccb1402dad7675d2e8cd42
    Size: 1.01 MB
  5. qpid-cpp-server-ssl-0.14-22.AXS4.i686.rpm
    MD5: 14bc5333ad4a829cdc1fa9024cc02c1e
    SHA-256: 07d011b572bab776406ac825420d1bccbbb756ea7da971a387320ec6a667be3e
    Size: 59.59 kB
  6. python-qpid-qmf-0.14-14.AXS4.i686.rpm
    MD5: af68eb998752ed3aaefab490cf42e2cc
    SHA-256: ca104ab11f507717603c2ffd516e1e3e3184969505c4a22f752c32cca74a362a
    Size: 311.17 kB
  7. qpid-qmf-0.14-14.AXS4.i686.rpm
    MD5: 9ed6619d73df0bf9331deab9cd37144d
    SHA-256: a182e207423a25156d2a43c9be4b61fc9af3c4e17fb8ea600ef6d312d86acc00
    Size: 422.67 kB
  8. ruby-qpid-qmf-0.14-14.AXS4.i686.rpm
    MD5: 321577b440fb0eddd15fbf29a08a160d
    SHA-256: 797ae4ed13587d3737ce952cfc5fcf4f7ae49c30741e594699e98603530b1ac8
    Size: 160.45 kB
  9. qpid-tools-0.14-6.AXS4.noarch.rpm
    MD5: ca973715865800de6ae18d34238e4f18
    SHA-256: 4a688291694322bc2ecf2f18057c36a0fc702ba2669b1eec2bfacba1932edaf9
    Size: 37.43 kB

Asianux Server 4 for x86_64
  1. python-qpid-0.14-11.AXS4.noarch.rpm
    MD5: 0ea4f4f3d88c85e74aecd58b1efa23dc
    SHA-256: 7249d2244eb5f12f119fa3aa398285dcfcd9a22165de2632d7d3cbf91e13e940
    Size: 408.75 kB
  2. qpid-cpp-client-0.14-22.AXS4.x86_64.rpm
    MD5: c6f303f4c863d37d9c3749a3765cfe4b
    SHA-256: ea200cde984d5131abf2bc181fed044387df60d7242fabf133abdff45b4d1232
    Size: 0.98 MB
  3. qpid-cpp-client-ssl-0.14-22.AXS4.x86_64.rpm
    MD5: 9263db2cb0e6ed10eef65267323fc17b
    SHA-256: 9d5fcc008cac9a251e0d894ab24f9d70db337c2aa04af2945584b3cdd33cd517
    Size: 108.29 kB
  4. qpid-cpp-server-0.14-22.AXS4.x86_64.rpm
    MD5: b6e840e54646704d9ffa456faf30e684
    SHA-256: 6db84636005143300fd3bd82137703b20a810f0a985d7214292dbe55970f6ba8
    Size: 0.99 MB
  5. qpid-cpp-server-ssl-0.14-22.AXS4.x86_64.rpm
    MD5: 1077f40b433cddad3e8b5fb2317bd7ff
    SHA-256: b8e8a997b8e6143b7af8fc576f030b2951827774ad8588d786998a7eebffd1f4
    Size: 59.09 kB
  6. qpid-cpp-client-0.14-22.AXS4.i686.rpm
    MD5: 72ee698e0d54f57b6a24ea5591a87fb9
    SHA-256: e78dc5ff1d380547e26e4b9681df0d9c3009d9e3de55108437d5e92deca10a91
    Size: 1.01 MB
  7. qpid-cpp-client-ssl-0.14-22.AXS4.i686.rpm
    MD5: 48fa83f6fc9a6c2055bb9eb44bd8d718
    SHA-256: 172466d26bd3e83365d5343b62f35b289c3739dcb56d4984409aa079dca7f0af
    Size: 110.53 kB
  8. qpid-cpp-server-0.14-22.AXS4.i686.rpm
    MD5: 04c6225996bb1fb56e8dcdf0d3a57301
    SHA-256: de70b6ac72efb93af3b18c0ca7f448783b831ba238ccb1402dad7675d2e8cd42
    Size: 1.01 MB
  9. python-qpid-qmf-0.14-14.AXS4.x86_64.rpm
    MD5: 1adcbb37f9055b0c9a43ac097a992463
    SHA-256: d62a226419c5bcf63c107de39cc828a4ea94c751b98c970ea9c6aba10cf5f1b9
    Size: 327.25 kB
  10. qpid-qmf-0.14-14.AXS4.x86_64.rpm
    MD5: c0aa31b5f57d743789d1afa327dbc599
    SHA-256: 53593316859aa2fe908fac89bb2db95eaa5ec2b74b69706911b21759f58a7d6a
    Size: 409.18 kB
  11. ruby-qpid-qmf-0.14-14.AXS4.x86_64.rpm
    MD5: 2e0806a6916b862e26546dab386018c0
    SHA-256: 347be3a880a44f8aa9824032f160061925dfde48d536be994ef6c6a3b15219bb
    Size: 182.36 kB
  12. qpid-qmf-0.14-14.AXS4.i686.rpm
    MD5: 9ed6619d73df0bf9331deab9cd37144d
    SHA-256: a182e207423a25156d2a43c9be4b61fc9af3c4e17fb8ea600ef6d312d86acc00
    Size: 422.67 kB
  13. qpid-tools-0.14-6.AXS4.noarch.rpm
    MD5: ede307884b8069a0611c9e37a99557e0
    SHA-256: b8d1da5348144e7d146fc16ee2f85ff028b4147b0d0eb55bca093b79d355e2f2
    Size: 36.99 kB