Skip to content

Security Updates 4.0 7

Jump to bottom
Siju Maliakkal edited this page Apr 7, 2021 · 1 revision

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2021-4.0-0007
Type : Security
Severity : ['Critical', 'Important', 'Moderate', 'Low']
Issued on : 2021-04-06
Affected Versions : Photon OS 4.0

Details

An update of {'linux-rt', 'curl', 'glib', 'libvirt', 'apache-tomcat', 'openssl', 'linux', 'libtiff', 'linux-secure', 'python3', 'docker', 'wpa_supplicant', 'mysql', 'linux-aws', 'containerd', 'nodejs'} packages of Photon OS has been released.

Affected Packages:

Critical

mysql - ['CVE-2020-11656']
python3 - ['CVE-2021-3177']

Important

linux-rt - ['CVE-2021-3348', 'CVE-2021-27364', 'CVE-2021-3444', 'CVE-2021-28375', 'CVE-2021-26708', 'CVE-2021-27365', 'CVE-2021-3347', 'CVE-2020-28374', 'CVE-2021-26930']
glib - ['CVE-2021-28153']
libvirt - ['CVE-2019-10161']
apache-tomcat - ['CVE-2021-25122', 'CVE-2021-25329', 'CVE-2020-17527']
openssl - ['CVE-2021-23840', 'CVE-2021-3449', 'CVE-2021-3450']
linux - ['CVE-2021-3348', 'CVE-2021-27364', 'CVE-2021-3444', 'CVE-2021-28375', 'CVE-2021-26708', 'CVE-2021-27365', 'CVE-2021-3347', 'CVE-2020-28374', 'CVE-2021-26930']
libtiff - ['CVE-2020-35524', 'CVE-2020-35523']
linux-secure - ['CVE-2021-3348', 'CVE-2021-27364', 'CVE-2021-3444', 'CVE-2021-28375', 'CVE-2021-26708', 'CVE-2021-27365', 'CVE-2021-3347', 'CVE-2020-28374', 'CVE-2021-26930']
wpa_supplicant - ['CVE-2021-27803']
mysql - ['CVE-2020-14828', 'CVE-2020-11080', 'CVE-2020-14878', 'CVE-2020-11655']
linux-aws - ['CVE-2021-3348', 'CVE-2021-27364', 'CVE-2021-3444', 'CVE-2021-28375', 'CVE-2021-26708', 'CVE-2021-27365', 'CVE-2021-3347', 'CVE-2020-28374', 'CVE-2021-26930']
containerd - ['CVE-2021-21334']
nodejs - ['CVE-2021-22883', 'CVE-2020-8265', 'CVE-2021-22884', 'CVE-2020-8277']

Moderate

linux-rt - ['CVE-2021-27363', 'CVE-2020-27170', 'CVE-2020-27171']
apache-tomcat - ['CVE-2021-24122']
openssl - ['CVE-2021-23841']
linux - ['CVE-2021-27363', 'CVE-2020-27170', 'CVE-2020-27171']
linux-secure - ['CVE-2021-27363', 'CVE-2020-27170', 'CVE-2020-27171']
python3 - ['CVE-2021-23336']
docker - ['CVE-2021-21285', 'CVE-2021-21284']
mysql - ['CVE-2020-14812', 'CVE-2020-14830', 'CVE-2020-14821', 'CVE-2021-2065', 'CVE-2021-2122', 'CVE-2020-14838', 'CVE-2020-14848', 'CVE-2021-2024', 'CVE-2020-14775', 'CVE-2020-14836', 'CVE-2021-2038', 'CVE-2020-14773', 'CVE-2021-2072', 'CVE-2020-14804', 'CVE-2020-14845', 'CVE-2021-2061', 'CVE-2021-2070', 'CVE-2021-2088', 'CVE-2020-14827', 'CVE-2021-2010', 'CVE-2021-2048', 'CVE-2020-14769', 'CVE-2021-2076', 'CVE-2021-2056', 'CVE-2020-14868', 'CVE-2021-2028', 'CVE-2020-14869', 'CVE-2021-2002', 'CVE-2020-14837', 'CVE-2021-2030', 'CVE-2020-14785', 'CVE-2020-14790', 'CVE-2020-14867', 'CVE-2020-14839', 'CVE-2021-2031', 'CVE-2021-2046', 'CVE-2021-2032', 'CVE-2020-14777', 'CVE-2020-14861', 'CVE-2020-14789', 'CVE-2020-14776', 'CVE-2021-2058', 'CVE-2021-2021', 'CVE-2021-2022', 'CVE-2021-2055', 'CVE-2020-14893', 'CVE-2020-14866', 'CVE-2021-2060', 'CVE-2020-14814', 'CVE-2020-14870', 'CVE-2020-14794', 'CVE-2020-14873', 'CVE-2020-14846', 'CVE-2020-1971', 'CVE-2020-14793', 'CVE-2020-14809', 'CVE-2020-14888', 'CVE-2020-14852', 'CVE-2020-14800', 'CVE-2021-2087', 'CVE-2020-15358', 'CVE-2021-2081', 'CVE-2020-14765', 'CVE-2020-14829', 'CVE-2020-14891', 'CVE-2020-14786', 'CVE-2021-2036', 'CVE-2021-2011', 'CVE-2020-14844']
linux-aws - ['CVE-2021-27363', 'CVE-2020-27170', 'CVE-2020-27171']
containerd - ['CVE-2020-15257']
nodejs - ['CVE-2020-8287']

Low

curl - ['CVE-2021-22890', 'CVE-2021-22876']

Solution

Update the affected packages (tdnf update package)
Note: For packages ['linux-rt', 'linux', 'linux-secure', 'linux-aws'] after updating, a reboot is required for taking effect.

Updated Packages Information

apache-tomcat-8.5.64-1.ph4.noarch.rpm , sha256 : a2cbbb7d88fb343de6f8c7d24a8f67da22fd679317f1c2a73c43696971443c27 , size : 7.9M , build_date : Fri, 02 Apr 2021 17:12:16 UTC
glib-doc-2.68.0-1.ph4.noarch.rpm , sha256 : 1070f6f4c130be177dd4eba3328c384568ffaabff23d5c8598bb1362875205ba , size : 1.5M , build_date : Fri, 02 Apr 2021 17:24:15 UTC
linux-api-headers-5.10.25-1.ph4.noarch.rpm , sha256 : 976afdf8ac0852b67c5d3762527d27f7577e89b1c620fda8620e438ef2add37e , size : 1.3M , build_date : Fri, 02 Apr 2021 17:03:29 UTC
python3-macros-3.9.1-3.ph4.noarch.rpm , sha256 : 6de81138e7af8f4c5282e41629718403d8998c2252d00a34cf3c75fec5621ed4 , size : 12K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
python3-pip-3.9.1-3.ph4.noarch.rpm , sha256 : 44146ed20ad16bce7132bdbf7c2571ae220222a4653e229287a5ca3555ec4174 , size : 1.1M , build_date : Fri, 02 Apr 2021 17:12:15 UTC
python3-setuptools-3.9.1-3.ph4.noarch.rpm , sha256 : b6bcf774755e4af96846e81dbdd1417284884cf7c1636e008d975aed8b9cb4b7 , size : 436K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
containerd-1.4.4-1.ph4.x86_64.rpm , sha256 : 8b3989da89f3c50b42ee6ba04976601de62a73fa19cf57df68954204ed42f435 , size : 20M , build_date : Fri, 02 Apr 2021 17:52:57 UTC
containerd-doc-1.4.4-1.ph4.x86_64.rpm , sha256 : c11589cf1817bd8c52de3d5f9aa4a611312cedcda16cd3506231691890dd9e81 , size : 16K , build_date : Fri, 02 Apr 2021 17:52:57 UTC
containerd-extras-1.4.4-1.ph4.x86_64.rpm , sha256 : 9d792234af66a079e182787f07c7d99d41abc23f0b57cbf36177614a03b8570f , size : 11M , build_date : Fri, 02 Apr 2021 17:52:57 UTC
curl-7.75.0-1.ph4.x86_64.rpm , sha256 : 6294d2fbd95e124388ffd70b510d856f0a1736a34f7809976c4660fa412e9b00 , size : 142K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
curl-devel-7.75.0-1.ph4.x86_64.rpm , sha256 : 051b0579a00c27fc9e184ecf3aa64c4c5da4153ee34e6854a7299ad5b4108970 , size : 741K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
curl-libs-7.75.0-1.ph4.x86_64.rpm , sha256 : ac2fc417012f2e34a01a82a6aece6b17e95dd27f3d82151df3bb361b0fafd65b , size : 270K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
docker-19.03.15-1.ph4.x86_64.rpm , sha256 : 63c631bf741d4873ed433c0341cb74113a7f562066fa73a5f41c48ab39efddd6 , size : 6.6K , build_date : Fri, 02 Apr 2021 18:15:09 UTC
docker-cli-19.03.15-1.ph4.x86_64.rpm , sha256 : 8dc98d526a360057c0e857f6fece17d4a0ead207abb83a1ecb41e2c2d5877cb1 , size : 16M , build_date : Fri, 02 Apr 2021 18:15:09 UTC
docker-doc-19.03.15-1.ph4.x86_64.rpm , sha256 : 53a7b53b61a8eaa237a7a20847c8b37905f839fc5d67540ba373a15da32615af , size : 206K , build_date : Fri, 02 Apr 2021 18:15:09 UTC
docker-engine-19.03.15-1.ph4.x86_64.rpm , sha256 : 16646cfbf3808f1887b25880a4f546ae67a88a341787bd47fcbb5b8b0f128f0e , size : 22M , build_date : Fri, 02 Apr 2021 18:15:09 UTC
glib-2.68.0-1.ph4.x86_64.rpm , sha256 : 34aa8e576dbb1c50ee03c1ab5260619e97069fb0de90f9070490a89bfa01be41 , size : 1.3M , build_date : Fri, 02 Apr 2021 17:24:15 UTC
glib-devel-2.68.0-1.ph4.x86_64.rpm , sha256 : add1e7768fe09089e0d7cb649420d7f308e3d9bc6164279317af12657687a561 , size : 1.8M , build_date : Fri, 02 Apr 2021 17:24:15 UTC
glib-schemas-2.68.0-1.ph4.x86_64.rpm , sha256 : b20c014efa744d983993162d78d629f5cf9f2acc206b0bdfb5113075155fa744 , size : 39K , build_date : Fri, 02 Apr 2021 17:24:15 UTC
libtiff-4.2.0-1.ph4.x86_64.rpm , sha256 : 285798a07f0744192efc7a1701364472ba78108b810ee2ab124d15874236a7dd , size : 418K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
libtiff-devel-4.2.0-1.ph4.x86_64.rpm , sha256 : 198ecedee132987f10f2e34e884847d5143b65701652432624f82bc1a90c877c , size : 505K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
libvirt-7.1.0-1.ph4.x86_64.rpm , sha256 : 6ab7f7e223a8c0a6ee2782b08dc73ead9d1b18f19ad2280474f3bbdaee57a583 , size : 2.7M , build_date : Fri, 02 Apr 2021 17:47:02 UTC
libvirt-devel-7.1.0-1.ph4.x86_64.rpm , sha256 : 360cfee474e6770e776180d0412f7db74e8db6bf725a6a6b7b1040b6d7141f70 , size : 67K , build_date : Fri, 02 Apr 2021 17:47:02 UTC
libvirt-docs-7.1.0-1.ph4.x86_64.rpm , sha256 : 4cf5ee4f3e60a1536645342c9290799890aa1bc2c8a725b5c44e9213d5381aa9 , size : 2.8M , build_date : Fri, 02 Apr 2021 17:47:02 UTC
linux-5.10.25-1.ph4.x86_64.rpm , sha256 : 309186dd9b7a9d7df9cc9262abb1532408e9d947fb11c345dc98bd4d363ee318 , size : 29M , build_date : Fri, 02 Apr 2021 19:20:27 UTC
linux-aws-5.10.25-1.ph4.x86_64.rpm , sha256 : 64d91a8e1d6edede96f3385b1a23b3f8c19b1376515ab047203c1267084ec6ea , size : 23M , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-aws-devel-5.10.25-1.ph4.x86_64.rpm , sha256 : 7827594d15c0eaa3850e3b0a198fe3e8549f8c62c1b39fe00edb18a19a62cb9c , size : 12M , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-aws-docs-5.10.25-1.ph4.x86_64.rpm , sha256 : 482285c62ae87cb2fd427b53ad9368bf547e241390f672818303b2b8b4afe4af , size : 7.8M , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-aws-drivers-gpu-5.10.25-1.ph4.x86_64.rpm , sha256 : c331419a7701a93e04e798a7d68324b92809de04c26c5472098bd0a97d341590 , size : 2.2M , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-aws-oprofile-5.10.25-1.ph4.x86_64.rpm , sha256 : 7ff4bccdb2460096e4922ec1a9f9ad5c2060d2ab9c8dbe124f1ca58249755441 , size : 37K , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-aws-sound-5.10.25-1.ph4.x86_64.rpm , sha256 : 2d25289d6a9f76074acfd44799def7152c27b13469b3eb51af3b97d68ea3ae13 , size : 251K , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-devel-5.10.25-1.ph4.x86_64.rpm , sha256 : a826e94303758e5d4e082ff9d5d916153619f85842affa78719eba12b3139222 , size : 12M , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-docs-5.10.25-1.ph4.x86_64.rpm , sha256 : 962625bdb31faf69ec632d857f7b21302ec6c705f5c41ad8529623fa3b60f32a , size : 7.8M , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-drivers-gpu-5.10.25-1.ph4.x86_64.rpm , sha256 : 0b2cc80a2d87b35f8362eb26b0104ec5e448335239067538f65bf76faeea055c , size : 3.5M , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-drivers-intel-sgx-5.10.25-1.ph4.x86_64.rpm , sha256 : 1c89cce5b0d73a1fbd947f3a85ac210c35213301c687285772f0a34a54e5d018 , size : 49K , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-drivers-sound-5.10.25-1.ph4.x86_64.rpm , sha256 : 1bb500107eb193744bc7d676114f21f2b995ec32a0914f32e0643140fa17cb96 , size : 607K , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-esx-5.10.25-1.ph4.x86_64.rpm , sha256 : 5cc5eb20998b05d03e72e61983ad9a5feda71f2fefdd236533060907d521bf9f , size : 12M , build_date : Fri, 02 Apr 2021 19:20:26 UTC
linux-esx-devel-5.10.25-1.ph4.x86_64.rpm , sha256 : f33107ddb791a2779e5c0f48206c6a2b107e1c61955f1298f16b81fc90caa403 , size : 11M , build_date : Fri, 02 Apr 2021 17:36:02 UTC
linux-esx-docs-5.10.25-1.ph4.x86_64.rpm , sha256 : b4245a625a306e80446989d0c943ba9318ff1e283c55a17c59970052f5d41e32 , size : 7.8M , build_date : Fri, 02 Apr 2021 17:36:02 UTC
linux-oprofile-5.10.25-1.ph4.x86_64.rpm , sha256 : 2cef8e946ada7f2135dde6658f8398e8405b6a6a059e1d2ced5caa3a19a2e7c8 , size : 55K , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-python3-perf-5.10.25-1.ph4.x86_64.rpm , sha256 : ca9ef81c3c4def0b31a8c77fdfc0113229a8232c02e531c660112d0437d95515 , size : 166K , build_date : Fri, 02 Apr 2021 17:46:48 UTC
linux-rt-5.10.25-1.ph4.x86_64.rpm , sha256 : 185593d41c4381ab1901e920a3a538d833d93c258bf7aa40a33ce50a15c66cb0 , size : 28M , build_date : Fri, 02 Apr 2021 19:23:13 UTC
linux-rt-devel-5.10.25-1.ph4.x86_64.rpm , sha256 : 7a384f0698a8659185f0087efe433c0eb24e9899ec96cacc8836144c05f8326a , size : 12M , build_date : Fri, 02 Apr 2021 17:47:07 UTC
linux-rt-docs-5.10.25-1.ph4.x86_64.rpm , sha256 : 71253899fcd3ce97d4e4b9909eb6dd63c9a8d0a5f6d61d43ed924f65ce108087 , size : 7.8M , build_date : Fri, 02 Apr 2021 17:47:07 UTC
linux-secure-5.10.25-1.ph4.x86_64.rpm , sha256 : bafd257a0d92be6036a87c4f2049532f0016c51208dd57f4d90eb9f342bfa9fb , size : 26M , build_date : Fri, 02 Apr 2021 19:22:02 UTC
linux-secure-devel-5.10.25-1.ph4.x86_64.rpm , sha256 : 8643a8e589efafc6a0d28c1d5ae21090cf1509e26567877282099d2ee52957b2 , size : 12M , build_date : Fri, 02 Apr 2021 17:36:02 UTC
linux-secure-docs-5.10.25-1.ph4.x86_64.rpm , sha256 : 064f27f0c314844906050cc25e98311165fda0091c83c1a5a865b1daca22276f , size : 7.8M , build_date : Fri, 02 Apr 2021 17:36:02 UTC
linux-tools-5.10.25-1.ph4.x86_64.rpm , sha256 : ef95f5d40fddc4429ebadfd067667765f88147794fc87d5ca13e178703457a9d , size : 1.7M , build_date : Fri, 02 Apr 2021 17:46:48 UTC
mysql-8.0.23-1.ph4.x86_64.rpm , sha256 : 27591c6ea3ca0bb97a7a5ebf5fbcf41f72c52f0fef0d00c09dab642200485f3f , size : 29M , build_date : Fri, 02 Apr 2021 17:12:23 UTC
mysql-devel-8.0.23-1.ph4.x86_64.rpm , sha256 : be99c3ff4fc92f5b96ac4ea1f311805c2cd0edec4d5df66c94898fac793b75ea , size : 1.9M , build_date : Fri, 02 Apr 2021 17:12:23 UTC
nodejs-14.16.0-1.ph4.x86_64.rpm , sha256 : c8903308655063ec45d969943e0f2c287765e6b1b77c5174ce0e9c1281a66187 , size : 24M , build_date : Fri, 02 Apr 2021 17:24:13 UTC
nodejs-devel-14.16.0-1.ph4.x86_64.rpm , sha256 : e93c035f0eee759ce9750f6b386164caf04e542c773fa54da17e5ae10cff4139 , size : 525K , build_date : Fri, 02 Apr 2021 17:24:13 UTC
openssl-1.1.1k-1.ph4.x86_64.rpm , sha256 : ef2779b8f87167554a006d48339ebf0a1969f689b525803110ac4814e4be8b85 , size : 1.7M , build_date : Fri, 02 Apr 2021 17:11:23 UTC
openssl-c_rehash-1.1.1k-1.ph4.x86_64.rpm , sha256 : e4d50a1ba89653a11ab57c291fdd33a3a039ee533492eb4ca9634787c088966d , size : 14K , build_date : Fri, 02 Apr 2021 17:11:23 UTC
openssl-devel-1.1.1k-1.ph4.x86_64.rpm , sha256 : a1595d5be4b399f05af9b1f0d561057d956a9e1e5e18c28182adcb33db83ec01 , size : 3.5M , build_date : Fri, 02 Apr 2021 17:11:23 UTC
openssl-docs-1.1.1k-1.ph4.x86_64.rpm , sha256 : 1632e76b906804d7048eb7ff85a2f37a36d5d21731fcf9d9bff61b834f8be10e , size : 1.3M , build_date : Fri, 02 Apr 2021 17:11:23 UTC
openssl-perl-1.1.1k-1.ph4.x86_64.rpm , sha256 : f52d6086bf92630f4636f0d9dd83a9aa8f9890ec2864ad5285315ab3752835cd , size : 16K , build_date : Fri, 02 Apr 2021 17:11:23 UTC
python3-3.9.1-3.ph4.x86_64.rpm , sha256 : 5bf95abcb14c746a36e980efc752163b140d9413d64c90aea897ba40a78a0c45 , size : 1.3M , build_date : Fri, 02 Apr 2021 17:12:15 UTC
python3-curses-3.9.1-3.ph4.x86_64.rpm , sha256 : 78c87d025db84d00b1d1f7b2c5469be265e1b3d94d961198cf84ff3f28b729d7 , size : 62K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
python3-devel-3.9.1-3.ph4.x86_64.rpm , sha256 : f182a38114eb3d5c57b5c41006308c61fa47d06e5c21fbb68fc069427e6aeb4a , size : 184K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
python3-libs-3.9.1-3.ph4.x86_64.rpm , sha256 : 424c93e032bf6f315ef54a2745d5c5482567e9e0ff82a79b217b1a1d61142e61 , size : 7.2M , build_date : Fri, 02 Apr 2021 17:12:15 UTC
python3-test-3.9.1-3.ph4.x86_64.rpm , sha256 : 7b1357d6492044e4f099ed8205176e3acf97661d55bbb33081755f06447b3ed9 , size : 3.1M , build_date : Fri, 02 Apr 2021 17:12:15 UTC
python3-tools-3.9.1-3.ph4.x86_64.rpm , sha256 : 20035b25b917885a30b780c1dd3a45758533e199580ce25a82ffed395c109cfb , size : 145K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
python3-xml-3.9.1-3.ph4.x86_64.rpm , sha256 : cc9b85204f0d503d3d83b80972c4cbb416eec5c8e8924c56761c6546f26d0d39 , size : 95K , build_date : Fri, 02 Apr 2021 17:12:15 UTC
wpa_supplicant-2.9-3.ph4.x86_64.rpm , sha256 : 6b705892b54d409056b04daad98cceeec3af83c5d194572d972fb7aaf712275e , size : 437K , build_date : Fri, 02 Apr 2021 18:12:10 UTC

Home | Download Photon OS | Documentation | VMware on GitHub

Clone this wiki locally