红帽产品勘误 RHSA-2024:1109 - Security Advisory
发布：
2024-03-05
已更新：
2024-03-05

RHSA-2024:1109 - Security Advisory

概述

Moderate: libmicrohttpd security update

类型/严重性

Security Advisory: Moderate

Red Hat Insights 补丁分析

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for libmicrohttpd is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application.

Security Fix(es):

  • libmicrohttpd: remote DoS (CVE-2023-27371)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, the httpd daemon will be restarted automatically.

受影响的产品

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.6 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.6 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.6 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.6 aarch64

修复

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
libmicrohttpd-0.9.59-2.el8_6.1.src.rpm SHA-256: 9c12e31e56abc4bde396a00d94a85e8ded9eefe51b0faa409c0a39f273bf5cff
x86_64
libmicrohttpd-0.9.59-2.el8_6.1.i686.rpm SHA-256: 7fc64f25fccdc1eefc6a9c2eeb7200a4886cbc415d45c6e780e11c7838a1dc65
libmicrohttpd-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 6f96f883c5146f1f586fc242ed37d46ddb0184d4cf6651e3bbbde22802a5fae3
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.i686.rpm SHA-256: 4c66b56bab16584e481e6b00caae95b890ffbc3fcce110737e5d3737bcc92e10
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 173150bbb552b3cdd0ea679eb7b15ae3534476f9785d3ff4252f1969cfb6f7ef
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.i686.rpm SHA-256: ac413e5fb18424919d37405a8bcd4a4c047db416feb2f3e1bf0f1822529b902e
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 1e952cd958078d0963567d291cc4bb8bc6353ab21a101f1cd4bd3e83e96836d8

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
libmicrohttpd-0.9.59-2.el8_6.1.src.rpm SHA-256: 9c12e31e56abc4bde396a00d94a85e8ded9eefe51b0faa409c0a39f273bf5cff
x86_64
libmicrohttpd-0.9.59-2.el8_6.1.i686.rpm SHA-256: 7fc64f25fccdc1eefc6a9c2eeb7200a4886cbc415d45c6e780e11c7838a1dc65
libmicrohttpd-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 6f96f883c5146f1f586fc242ed37d46ddb0184d4cf6651e3bbbde22802a5fae3
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.i686.rpm SHA-256: 4c66b56bab16584e481e6b00caae95b890ffbc3fcce110737e5d3737bcc92e10
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 173150bbb552b3cdd0ea679eb7b15ae3534476f9785d3ff4252f1969cfb6f7ef
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.i686.rpm SHA-256: ac413e5fb18424919d37405a8bcd4a4c047db416feb2f3e1bf0f1822529b902e
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 1e952cd958078d0963567d291cc4bb8bc6353ab21a101f1cd4bd3e83e96836d8

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
libmicrohttpd-0.9.59-2.el8_6.1.src.rpm SHA-256: 9c12e31e56abc4bde396a00d94a85e8ded9eefe51b0faa409c0a39f273bf5cff
x86_64
libmicrohttpd-0.9.59-2.el8_6.1.i686.rpm SHA-256: 7fc64f25fccdc1eefc6a9c2eeb7200a4886cbc415d45c6e780e11c7838a1dc65
libmicrohttpd-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 6f96f883c5146f1f586fc242ed37d46ddb0184d4cf6651e3bbbde22802a5fae3
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.i686.rpm SHA-256: 4c66b56bab16584e481e6b00caae95b890ffbc3fcce110737e5d3737bcc92e10
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 173150bbb552b3cdd0ea679eb7b15ae3534476f9785d3ff4252f1969cfb6f7ef
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.i686.rpm SHA-256: ac413e5fb18424919d37405a8bcd4a4c047db416feb2f3e1bf0f1822529b902e
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 1e952cd958078d0963567d291cc4bb8bc6353ab21a101f1cd4bd3e83e96836d8

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
libmicrohttpd-0.9.59-2.el8_6.1.src.rpm SHA-256: 9c12e31e56abc4bde396a00d94a85e8ded9eefe51b0faa409c0a39f273bf5cff
s390x
libmicrohttpd-0.9.59-2.el8_6.1.s390x.rpm SHA-256: eea319f869d535cebf8cb6a04e25677bc56fb7399044469ba8663ad47c7469c8
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.s390x.rpm SHA-256: 5b89ba42f94bce8c723923f3ff16cac380856083021356833808ca91b45a977f
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.s390x.rpm SHA-256: 002055897cf6722110e2693529af39677be11f189384a01d5edc72aa4747708c

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
libmicrohttpd-0.9.59-2.el8_6.1.src.rpm SHA-256: 9c12e31e56abc4bde396a00d94a85e8ded9eefe51b0faa409c0a39f273bf5cff
ppc64le
libmicrohttpd-0.9.59-2.el8_6.1.ppc64le.rpm SHA-256: 99b5a1d6c268e49be2e1fe301b61893aa9bb5051ddeafc65d5ef83c9383a0162
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.ppc64le.rpm SHA-256: bed9b3602e32ffcb0cc9ed150da6feb4763a79e61467094f167c4fa287406069
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.ppc64le.rpm SHA-256: 37338436b7aeb279aaf509a6ee2471c82eaaf1cab7ef8cefba82a99b70bb7ead

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
libmicrohttpd-0.9.59-2.el8_6.1.src.rpm SHA-256: 9c12e31e56abc4bde396a00d94a85e8ded9eefe51b0faa409c0a39f273bf5cff
x86_64
libmicrohttpd-0.9.59-2.el8_6.1.i686.rpm SHA-256: 7fc64f25fccdc1eefc6a9c2eeb7200a4886cbc415d45c6e780e11c7838a1dc65
libmicrohttpd-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 6f96f883c5146f1f586fc242ed37d46ddb0184d4cf6651e3bbbde22802a5fae3
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.i686.rpm SHA-256: 4c66b56bab16584e481e6b00caae95b890ffbc3fcce110737e5d3737bcc92e10
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 173150bbb552b3cdd0ea679eb7b15ae3534476f9785d3ff4252f1969cfb6f7ef
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.i686.rpm SHA-256: ac413e5fb18424919d37405a8bcd4a4c047db416feb2f3e1bf0f1822529b902e
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 1e952cd958078d0963567d291cc4bb8bc6353ab21a101f1cd4bd3e83e96836d8

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
libmicrohttpd-0.9.59-2.el8_6.1.src.rpm SHA-256: 9c12e31e56abc4bde396a00d94a85e8ded9eefe51b0faa409c0a39f273bf5cff
aarch64
libmicrohttpd-0.9.59-2.el8_6.1.aarch64.rpm SHA-256: 1e20a23d48c1c60700710424c44479f8cce6279e29fb4e72b462eb9d4f26b3f0
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.aarch64.rpm SHA-256: cc79a65060850b098aa244183f9973c96cb965bb765e1b1365f71b17ed4dbf71
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.aarch64.rpm SHA-256: c94d581bc5b6bef237a76eb7e82d5e76a26b665c83e83e38996549b251408e78

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
libmicrohttpd-0.9.59-2.el8_6.1.src.rpm SHA-256: 9c12e31e56abc4bde396a00d94a85e8ded9eefe51b0faa409c0a39f273bf5cff
ppc64le
libmicrohttpd-0.9.59-2.el8_6.1.ppc64le.rpm SHA-256: 99b5a1d6c268e49be2e1fe301b61893aa9bb5051ddeafc65d5ef83c9383a0162
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.ppc64le.rpm SHA-256: bed9b3602e32ffcb0cc9ed150da6feb4763a79e61467094f167c4fa287406069
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.ppc64le.rpm SHA-256: 37338436b7aeb279aaf509a6ee2471c82eaaf1cab7ef8cefba82a99b70bb7ead

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
libmicrohttpd-0.9.59-2.el8_6.1.src.rpm SHA-256: 9c12e31e56abc4bde396a00d94a85e8ded9eefe51b0faa409c0a39f273bf5cff
x86_64
libmicrohttpd-0.9.59-2.el8_6.1.i686.rpm SHA-256: 7fc64f25fccdc1eefc6a9c2eeb7200a4886cbc415d45c6e780e11c7838a1dc65
libmicrohttpd-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 6f96f883c5146f1f586fc242ed37d46ddb0184d4cf6651e3bbbde22802a5fae3
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.i686.rpm SHA-256: 4c66b56bab16584e481e6b00caae95b890ffbc3fcce110737e5d3737bcc92e10
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 173150bbb552b3cdd0ea679eb7b15ae3534476f9785d3ff4252f1969cfb6f7ef
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.i686.rpm SHA-256: ac413e5fb18424919d37405a8bcd4a4c047db416feb2f3e1bf0f1822529b902e
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 1e952cd958078d0963567d291cc4bb8bc6353ab21a101f1cd4bd3e83e96836d8

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.6

SRPM
x86_64
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.i686.rpm SHA-256: 4c66b56bab16584e481e6b00caae95b890ffbc3fcce110737e5d3737bcc92e10
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 173150bbb552b3cdd0ea679eb7b15ae3534476f9785d3ff4252f1969cfb6f7ef
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.i686.rpm SHA-256: ac413e5fb18424919d37405a8bcd4a4c047db416feb2f3e1bf0f1822529b902e
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 1e952cd958078d0963567d291cc4bb8bc6353ab21a101f1cd4bd3e83e96836d8
libmicrohttpd-devel-0.9.59-2.el8_6.1.i686.rpm SHA-256: e6492a8a45b2b8f6fe6ca7dc87e54d95f9283d12ac0bac67d23f6ecdd1087e60
libmicrohttpd-devel-0.9.59-2.el8_6.1.x86_64.rpm SHA-256: 8eb7a8078083e36f1f4ac9e85d1b695f7dc85d72924059f3d6828b578f6791e5
libmicrohttpd-doc-0.9.59-2.el8_6.1.noarch.rpm SHA-256: 9862a8f057242673f132b9c79dde177297b7b7beba06855500a60ff72062cc93

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.6

SRPM
ppc64le
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.ppc64le.rpm SHA-256: bed9b3602e32ffcb0cc9ed150da6feb4763a79e61467094f167c4fa287406069
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.ppc64le.rpm SHA-256: 37338436b7aeb279aaf509a6ee2471c82eaaf1cab7ef8cefba82a99b70bb7ead
libmicrohttpd-devel-0.9.59-2.el8_6.1.ppc64le.rpm SHA-256: 5a2f84497ab4307eee8f2e5073fd61eb70bc9220811f0419866fd2e48ec2274a
libmicrohttpd-doc-0.9.59-2.el8_6.1.noarch.rpm SHA-256: 9862a8f057242673f132b9c79dde177297b7b7beba06855500a60ff72062cc93

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.6

SRPM
s390x
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.s390x.rpm SHA-256: 5b89ba42f94bce8c723923f3ff16cac380856083021356833808ca91b45a977f
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.s390x.rpm SHA-256: 002055897cf6722110e2693529af39677be11f189384a01d5edc72aa4747708c
libmicrohttpd-devel-0.9.59-2.el8_6.1.s390x.rpm SHA-256: b7f09c604d424db473eb348392a3e37abb049f7c04d4274c4c2a3efa3581d2b8
libmicrohttpd-doc-0.9.59-2.el8_6.1.noarch.rpm SHA-256: 9862a8f057242673f132b9c79dde177297b7b7beba06855500a60ff72062cc93

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.6

SRPM
aarch64
libmicrohttpd-debuginfo-0.9.59-2.el8_6.1.aarch64.rpm SHA-256: cc79a65060850b098aa244183f9973c96cb965bb765e1b1365f71b17ed4dbf71
libmicrohttpd-debugsource-0.9.59-2.el8_6.1.aarch64.rpm SHA-256: c94d581bc5b6bef237a76eb7e82d5e76a26b665c83e83e38996549b251408e78
libmicrohttpd-devel-0.9.59-2.el8_6.1.aarch64.rpm SHA-256: 52d9fe65925937299b404d9bb9c7576f447e29bb54fa4a585eba731e386a8f64
libmicrohttpd-doc-0.9.59-2.el8_6.1.noarch.rpm SHA-256: 9862a8f057242673f132b9c79dde177297b7b7beba06855500a60ff72062cc93

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。