Security Update 3.0 358

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2022-3.0-0358

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2022-02-06

Affected Release: 3.0

Details

Updates of ['mysql', 'wpa_supplicant', 'python-numpy', 'rust', 'expat', 'python-lxml', 'vim'] packages of Photon OS have been released.

Affected Packages

Critical

wpa_supplicant - ['CVE-2022-23303', 'CVE-2022-23304']

expat - ['CVE-2022-23852']

vim - ['CVE-2022-0318']

Important

mysql - ['CVE-2022-21351']

rust - ['CVE-2020-25792', 'CVE-2020-25794', 'CVE-2020-25795', 'CVE-2020-25796', 'CVE-2020-25793', 'CVE-2020-25791']

expat - ['CVE-2022-23990']

python-lxml - ['CVE-2021-43818']

vim - ['CVE-2021-4192', 'CVE-2021-4166', 'CVE-2022-0261', 'CVE-2021-4187']

Moderate

mysql - ['CVE-2022-21335', 'CVE-2022-21330', 'CVE-2022-21356', 'CVE-2022-21270', 'CVE-2022-21358', 'CVE-2022-21363', 'CVE-2022-21303', 'CVE-2022-21314', 'CVE-2022-21302', 'CVE-2022-21318', 'CVE-2022-21308', 'CVE-2022-21301', 'CVE-2022-21342', 'CVE-2022-21286', 'CVE-2022-21337', 'CVE-2022-21370', 'CVE-2022-21367', 'CVE-2022-21280', 'CVE-2022-21287', 'CVE-2022-21256', 'CVE-2022-21334', 'CVE-2022-21253', 'CVE-2022-21316', 'CVE-2022-21374', 'CVE-2022-21307', 'CVE-2022-21288', 'CVE-2022-21279', 'CVE-2022-21327', 'CVE-2022-21290', 'CVE-2022-21362', 'CVE-2022-21315', 'CVE-2022-21368', 'CVE-2022-21328', 'CVE-2022-21304', 'CVE-2022-21309', 'CVE-2022-21329', 'CVE-2022-21344', 'CVE-2022-21336', 'CVE-2022-21284', 'CVE-2022-21322', 'CVE-2022-21320', 'CVE-2022-21326', 'CVE-2022-21289', 'CVE-2022-21332', 'CVE-2022-21245', 'CVE-2022-21285', 'CVE-2022-21310', 'CVE-2022-21264', 'CVE-2022-21378', 'CVE-2022-21348', 'CVE-2022-21254', 'CVE-2022-21339']

python-numpy - ['CVE-2021-41496']

rust - ['CVE-2022-21658']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

mysql-8.0.28-1.ph3.x86_64.rpm | size : 71M , sha256 : 8b3c9e8b6e99b02ac02f98a6935f45538a8ccf01bcd619c241dfd90b97ba09f7 , build time : Fri, 04 Feb 2022 22:30:33 UTC

mysql-devel-8.0.28-1.ph3.x86_64.rpm | size : 2.7M , sha256 : 61325e39c0c25eb8afd3d096c424dce4982956205185d1d3c9a3531a52da853e , build time : Fri, 04 Feb 2022 22:30:33 UTC

mysql-icu-data-files-8.0.28-1.ph3.x86_64.rpm | size : 2.4M , sha256 : 9893284fe93e6026e87fe7b609768340f9d4583afba965436f2e5808b7761f4d , build time : Fri, 04 Feb 2022 22:30:33 UTC

wpa_supplicant-2.10-1.ph3.x86_64.rpm | size : 548K , sha256 : 56011200144f9a7553a26f176a75a17ff2840a5c5075143290cd2a31b3da54da , build time : Fri, 04 Feb 2022 21:16:36 UTC

python-numpy-1.15.1-4.ph3.x86_64.rpm | size : 4.0M , sha256 : bbc1a65709224dd06d0ed14acdfa16a95b09f57fcbb025c0eb52315dcfa67ddc , build time : Fri, 04 Feb 2022 21:08:57 UTC

rust-1.58.1-1.ph3.x86_64.rpm | size : 175M , sha256 : 4f4abee7bcc303e734e0c19bbcbfb08febcb6188b10b03c76beed99e32565b70 , build time : Fri, 04 Feb 2022 23:00:22 UTC

expat-2.2.9-6.ph3.x86_64.rpm | size : 36K , sha256 : 54d8980798674ad21fb251c303767ac63bf4ad2d5d93e1dba3d56b3674529821 , build time : Fri, 04 Feb 2022 20:48:10 UTC

expat-devel-2.2.9-6.ph3.x86_64.rpm | size : 24K , sha256 : 74eaebb8552afe10cc037527966b07c351952a46b7bab6d0090fdca4edac4c97 , build time : Fri, 04 Feb 2022 20:48:10 UTC

expat-libs-2.2.9-6.ph3.x86_64.rpm | size : 84K , sha256 : ed24ecbaf1a2ea338a15926917ce5c8f34c1d81233dd723433e988615f81078f , build time : Fri, 04 Feb 2022 20:48:10 UTC

python-lxml-4.2.4-3.ph3.x86_64.rpm | size : 1.8M , sha256 : a2956c7d9cbe812a2655ba21c649325da94dbdaf327b027f88544fcec8c7f4de , build time : Fri, 04 Feb 2022 20:52:32 UTC

vim-8.2.3408-15.ph3.x86_64.rpm | size : 1.7M , sha256 : deedbc0c6768eb922a1713dc27cf5cb9f09e525ca1133fc33d18afe0246e9511 , build time : Fri, 04 Feb 2022 20:50:55 UTC

vim-extra-8.2.3408-15.ph3.x86_64.rpm | size : 11M , sha256 : b2ff73fc09dece879dfc5b15d94506ee0750ba3b80ac44468b4f7abe8404fa80 , build time : Fri, 04 Feb 2022 20:50:55 UTC