Security Update 4.0 153

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2022-4.0-0153

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2022-02-15

Affected Release: 4.0

Details

Updates of ['runc', 'wpa_supplicant', 'expat', 'mysql', 'vim'] packages of Photon OS have been released.

Affected Packages

Critical

wpa_supplicant - ['CVE-2022-23304', 'CVE-2022-23303']

vim - ['CVE-2022-0318']

Important

expat - ['CVE-2022-23990']

mysql - ['CVE-2022-21351']

vim - ['CVE-2021-4192', 'CVE-2021-3903', 'CVE-2021-3927', 'CVE-2021-3928', 'CVE-2022-0261', 'CVE-2021-4166', 'CVE-2021-4136', 'CVE-2021-4187']

Moderate

runc - ['CVE-2021-43784']

mysql - ['CVE-2022-21374', 'CVE-2022-21370', 'CVE-2022-21322', 'CVE-2022-21289', 'CVE-2022-21301', 'CVE-2022-21303', 'CVE-2022-21330', 'CVE-2022-21308', 'CVE-2022-21288', 'CVE-2022-21332', 'CVE-2022-21304', 'CVE-2022-21326', 'CVE-2022-21344', 'CVE-2022-21285', 'CVE-2022-21337', 'CVE-2022-21329', 'CVE-2022-21280', 'CVE-2022-21367', 'CVE-2022-21328', 'CVE-2022-21302', 'CVE-2022-21307', 'CVE-2022-21342', 'CVE-2022-21363', 'CVE-2022-21314', 'CVE-2022-21270', 'CVE-2022-21356', 'CVE-2022-21279', 'CVE-2022-21358', 'CVE-2022-21284', 'CVE-2022-21253', 'CVE-2022-21334', 'CVE-2022-21368', 'CVE-2022-21254', 'CVE-2022-21315', 'CVE-2022-21327', 'CVE-2022-21348', 'CVE-2022-21310', 'CVE-2022-21320', 'CVE-2022-21318', 'CVE-2022-21316', 'CVE-2022-21264', 'CVE-2022-21245', 'CVE-2022-21362', 'CVE-2022-21286', 'CVE-2022-21287', 'CVE-2022-21290', 'CVE-2022-21378', 'CVE-2022-21309', 'CVE-2022-21335', 'CVE-2022-21336', 'CVE-2022-21339', 'CVE-2022-21256']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

runc-1.0.3-1.ph4.x86_64.rpm | size : 3.1M , sha256 : 40693072a3b8e384bae2bab9328d2269d2d72fda87847a7ca96621d03b213369 , build time : Tue, 15 Feb 2022 02:53:17 UTC

runc-doc-1.0.3-1.ph4.x86_64.rpm | size : 16K , sha256 : fda7fe1c91e9c675840a9c3eda459a22cca17d5ee58d2f86b77527058df9bbca , build time : Tue, 15 Feb 2022 02:53:17 UTC

wpa_supplicant-2.10-1.ph4.x86_64.rpm | size : 480K , sha256 : 970450ff5743533c97032b4f291c3992a793590a6c2d4198846ac6c212fb7536 , build time : Tue, 15 Feb 2022 02:53:51 UTC

expat-2.2.9-6.ph4.x86_64.rpm | size : 24K , sha256 : 6e2739dc9894f149010a90a872706782007c511c710d0e855aa31674310e1fc7 , build time : Tue, 15 Feb 2022 02:52:17 UTC

expat-devel-2.2.9-6.ph4.x86_64.rpm | size : 24K , sha256 : 9edbe252c75455096d50c88002066fa12fdb1e696354e12306ba5d8ed3bfa841 , build time : Tue, 15 Feb 2022 02:52:17 UTC

expat-docs-2.2.9-6.ph4.x86_64.rpm | size : 24K , sha256 : 849bd3af30b3b211937f0f55a67fa831a9d99d38cd1a09ad6e5f87187fa7e158 , build time : Tue, 15 Feb 2022 02:52:17 UTC

expat-libs-2.2.9-6.ph4.x86_64.rpm | size : 76K , sha256 : 1b7b87397cbc220d62750d79f8e0f6d9d9a0e6f5a2e84f396be2faf0163b498b , build time : Tue, 15 Feb 2022 02:52:17 UTC

mysql-8.0.28-1.ph4.x86_64.rpm | size : 31M , sha256 : f38c5484831a3d90e30636eabbfb259b42746ac12c10eed82630995c3a71db1f , build time : Tue, 15 Feb 2022 02:53:27 UTC

mysql-devel-8.0.28-1.ph4.x86_64.rpm | size : 2.0M , sha256 : 54d6e80f37081b13c1f2a2f77a3088d29f873218dc790356a46a9d28efaf0b4b , build time : Tue, 15 Feb 2022 02:53:27 UTC

mysql-icu-data-files-8.0.28-1.ph4.x86_64.rpm | size : 2.2M , sha256 : 064135cdb64d06136c75e2374b7f072178a0f912f6618c97f9fb7f3ee137eb6e , build time : Tue, 15 Feb 2022 02:53:27 UTC

vim-8.2.3428-7.ph4.x86_64.rpm | size : 1.5M , sha256 : 9ac58044e22aa367c441b1e0257b457f343063ce18f42cb4d831edd3153af6b3 , build time : Tue, 15 Feb 2022 02:53:07 UTC

vim-extra-8.2.3428-7.ph4.x86_64.rpm | size : 6.9M , sha256 : 82c7de5fa57d985fab82548a47624ba75259e0f3d39586c9e7e99acb1a114293 , build time : Tue, 15 Feb 2022 02:53:07 UTC