Security Update 4.0 271

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2022-4.0-0271

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2022-10-28

Affected Release: 4.0

Details

Updates of ['openvswitch', 'dbus-broker', 'expat', 'binutils', 'linux', 'xerces-c', 'linux-esx', 'linux-secure', 'libtasn1', 'linux-aws', 'git', 'linux-rt', 'curl'] packages of Photon OS have been released.

Affected Packages

Critical

libtasn1 - ['CVE-2021-46848']

Important

openvswitch - ['CVE-2021-3905']

dbus-broker - ['CVE-2022-31213', 'CVE-2022-31212']

expat - ['CVE-2022-43680']

linux - ['CVE-2022-2602', 'CVE-2022-41674', 'CVE-2022-42720']

xerces-c - ['CVE-2018-1311']

linux-esx - ['CVE-2022-41674', 'CVE-2022-2602', 'CVE-2022-42720']

linux-secure - ['CVE-2022-2602', 'CVE-2022-41674', 'CVE-2022-42720']

linux-aws - ['CVE-2022-2602', 'CVE-2022-41674', 'CVE-2022-42720']

git - ['CVE-2022-39260', 'CVE-2022-24975']

linux-rt - ['CVE-2022-2602', 'CVE-2022-41674', 'CVE-2022-42720']

curl - ['CVE-2022-42916', 'CVE-2022-42915', 'CVE-2022-3221']

Moderate

binutils - ['CVE-2022-38533']

linux - ['CVE-2022-42721', 'CVE-2022-42722']

linux-secure - ['CVE-2022-42721', 'CVE-2022-42722']

linux-aws - ['CVE-2022-42721', 'CVE-2022-42722']

git - ['CVE-2022-39253']

linux-rt - ['CVE-2022-42721', 'CVE-2022-42722']

curl - ['CVE-2022-35260']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux', 'linux-esx', 'linux-secure', 'linux-aws', 'linux-rt'] after updating, a reboot is required for taking effect.

Updated Packages Information

openvswitch-2.14.0-11.ph4.x86_64.rpm | size : 1.7M , sha256 : 0a2ed4c86856acdef3228ad1f053fe4e4ec32bbf48c40ebf12d8269c6762d0fd , build time : Fri, 28 Oct 2022 04:42:01 UTC

openvswitch-devel-2.14.0-11.ph4.x86_64.rpm | size : 128K , sha256 : f398952b28bbfe1e81fa24f295fe55dc89de883228a722a1de0bf336338b2a4c , build time : Fri, 28 Oct 2022 04:42:01 UTC

openvswitch-devel-static-2.14.0-11.ph4.x86_64.rpm | size : 1.4M , sha256 : 3130dac86842fe0884899466b9a5850471b14ed0f990cd744bd5b486a4ba2174 , build time : Fri, 28 Oct 2022 04:42:01 UTC

openvswitch-doc-2.14.0-11.ph4.x86_64.rpm | size : 292K , sha256 : 593b6f33140c5d1ac596c0a8cc82e2dda0f6396289631f1d55774baea272a7f4 , build time : Fri, 28 Oct 2022 04:42:01 UTC

dbus-broker-32-1.ph4.x86_64.rpm | size : 156K , sha256 : 3c2dc6348e6b15af102eb1077151bcdce7e44e40c753368ef2eaf6b981d7efe0 , build time : Fri, 28 Oct 2022 04:47:12 UTC

expat-2.2.9-11.ph4.x86_64.rpm | size : 24K , sha256 : 3c2c90ae4f12942ab61ad65bf5d8461b33f7aac5653d5909b35f5c5b010a1e4c , build time : Fri, 28 Oct 2022 04:39:36 UTC

expat-devel-2.2.9-11.ph4.x86_64.rpm | size : 24K , sha256 : 84006bb478ec08ef45ad3fe21ef37f98ebbdf007e9c5c68038912aac7f778ede , build time : Fri, 28 Oct 2022 04:39:36 UTC

expat-docs-2.2.9-11.ph4.x86_64.rpm | size : 24K , sha256 : dce8b6ae15665f48fef20d1beec777b354a79a0532eaff73a59a64ceed9955fe , build time : Fri, 28 Oct 2022 04:39:36 UTC

expat-libs-2.2.9-11.ph4.x86_64.rpm | size : 76K , sha256 : 0b4d97ad295bb830efb8bee5cb76eaab4801bf03e486338c8f8af5bb1c800698 , build time : Fri, 28 Oct 2022 04:39:36 UTC

binutils-2.35-5.ph4.x86_64.rpm | size : 4.6M , sha256 : c1b809e62ecd99749705195355ddc89af2386e8c04a29210569991ada587eb7a , build time : Fri, 28 Oct 2022 04:35:39 UTC

binutils-devel-2.35-5.ph4.x86_64.rpm | size : 1.1M , sha256 : f6c57293e344b26a8482517ceb42f6f9e633b276a4d13beef8fefe4cf00812a5 , build time : Fri, 28 Oct 2022 04:35:39 UTC

binutils-libs-2.35-5.ph4.x86_64.rpm | size : 884K , sha256 : d04660b9bd2cd816c2ae1a2d56172a93be6575232e133c56ed0362bea891c651 , build time : Fri, 28 Oct 2022 04:35:39 UTC

linux-5.10.142-4.ph4.x86_64.rpm | size : 31M , sha256 : 35cfe8a847a27687f13edf7b323d0005ca67fb58a1f102cd935f56b5d1e24c2f , build time : Fri, 28 Oct 2022 06:12:18 UTC

linux-aws-5.10.142-3.ph4.x86_64.rpm | size : 24M , sha256 : 257306bcd1f98860a0e92eb2d7e238dbef2aae3bcae158c08b6377f68bfac658 , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-devel-5.10.142-3.ph4.x86_64.rpm | size : 12M , sha256 : 3c4b740a9671fee7c4f790797e610642c5d0ed840dfe07f59c90350e7b7a565f , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-docs-5.10.142-3.ph4.x86_64.rpm | size : 7.8M , sha256 : f20ef36d65f3062dea2ee8431e314e67b0e265a785b4af427c95f7381e8d4193 , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-drivers-gpu-5.10.142-3.ph4.x86_64.rpm | size : 2.3M , sha256 : 02966effbbeaea0765c21f78a6383c04c5a3d3beb662fb177635eb7b2599625d , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-oprofile-5.10.142-3.ph4.x86_64.rpm | size : 44K , sha256 : cd1ee50cdaec35569b473aefce5795902b4686bfb2377cfd3731a9ec01c36382 , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-sound-5.10.142-3.ph4.x86_64.rpm | size : 268K , sha256 : 0e576701950adaeb52afc513e159b3b86ce848a4db7f33f4de9f2cbed9688d37 , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-devel-5.10.142-4.ph4.x86_64.rpm | size : 12M , sha256 : 41bf216cfff0deeeb441c20a7e6958f88fb172ee0ea459b3fdb3f0249943e33c , build time : Fri, 28 Oct 2022 04:42:17 UTC

linux-docs-5.10.142-4.ph4.x86_64.rpm | size : 7.9M , sha256 : aa4e31dde79ce5f01a2fc2b380cc0b1db5b492f22269683f896bb31f3b80518c , build time : Fri, 28 Oct 2022 04:42:17 UTC

linux-drivers-gpu-5.10.142-4.ph4.x86_64.rpm | size : 3.8M , sha256 : d195fbeb54fe8e814489318f25b2d89da524a470197258eeb7f9b3ffb0f6c332 , build time : Fri, 28 Oct 2022 04:42:17 UTC

linux-drivers-intel-sgx-5.10.142-4.ph4.x86_64.rpm | size : 56K , sha256 : 7ab299864962948a2aa5f495ff8915768e1b57c72f37b72b77c06ec3b828efd5 , build time : Fri, 28 Oct 2022 04:42:17 UTC

linux-drivers-sound-5.10.142-4.ph4.x86_64.rpm | size : 660K , sha256 : 6d5400c6590cba7574ac555a6dc1cf740ba737f86d2b49b73c98d76d5433efbf , build time : Fri, 28 Oct 2022 04:42:17 UTC

linux-esx-5.10.142-4.ph4.x86_64.rpm | size : 14M , sha256 : a8d7dc10e80e4caa2f0704d1d46a51ff963cc9978b83de4474835db09a3e1d69 , build time : Fri, 28 Oct 2022 06:12:18 UTC

linux-esx-devel-5.10.142-4.ph4.x86_64.rpm | size : 11M , sha256 : 64f705cdfd2154cf5f3d21826990cdddbfb011c4bfb38a435a32593d082e3384 , build time : Fri, 28 Oct 2022 04:46:08 UTC

linux-esx-docs-5.10.142-4.ph4.x86_64.rpm | size : 7.8M , sha256 : 97a95e85b89e9af9b24b00b2819d0fc3f4c7e808c963e1ec46de0ca7ba6b24ef , build time : Fri, 28 Oct 2022 04:46:08 UTC

linux-oprofile-5.10.142-4.ph4.x86_64.rpm | size : 64K , sha256 : 3eab57105ebfbe914b6ad4c22be9a81caef6ad1394781625435b2280a20ff59b , build time : Fri, 28 Oct 2022 04:42:17 UTC

linux-python3-perf-5.10.142-4.ph4.x86_64.rpm | size : 172K , sha256 : 4f795b09ffd3df305f5797a61fc34dcab465c956984279c070aa567888a0e653 , build time : Fri, 28 Oct 2022 04:42:17 UTC

linux-rt-5.10.142-3.ph4.x86_64.rpm | size : 30M , sha256 : 9766fd708a76bb5c5076b24403d6b1f74a714d76820bfbae95ff1292ee404b6c , build time : Fri, 28 Oct 2022 06:14:34 UTC

linux-rt-devel-5.10.142-3.ph4.x86_64.rpm | size : 12M , sha256 : a0452d76bdf123853d529df253dfd4b0da1e74b43ac961a451c736de87a86ea9 , build time : Fri, 28 Oct 2022 04:46:32 UTC

linux-rt-docs-5.10.142-3.ph4.x86_64.rpm | size : 7.8M , sha256 : ec925189c0822be459ac54401d44d1f36ee5d156de85e7690cb9f91f07ed5a02 , build time : Fri, 28 Oct 2022 04:46:32 UTC

linux-secure-5.10.142-3.ph4.x86_64.rpm | size : 26M , sha256 : 56c74d90a68ea449fe6c28291a86fb8d605d6b225ae61f6dafe135bf575b89b8 , build time : Fri, 28 Oct 2022 06:12:19 UTC

linux-secure-devel-5.10.142-3.ph4.x86_64.rpm | size : 12M , sha256 : 786a3b34f253ee28d58d654860e28d6345e1e0877c3db2b15f9ad2b3d6395bc5 , build time : Fri, 28 Oct 2022 04:45:23 UTC

linux-secure-docs-5.10.142-3.ph4.x86_64.rpm | size : 7.8M , sha256 : de6a29ebe6d90d3d9042c08174f890bb4087f1e1fc79953f9f651f611c7bb91e , build time : Fri, 28 Oct 2022 04:45:23 UTC

linux-tools-5.10.142-4.ph4.x86_64.rpm | size : 1.7M , sha256 : 2ab9940510b0c58218dc7a7e11dfded7d3db2b43b7f91f903acc1d74193f071d , build time : Fri, 28 Oct 2022 04:42:17 UTC

xerces-c-3.2.4-1.ph4.x86_64.rpm | size : 1.2M , sha256 : eb42e2e926bf58cc773d6ffdd14fff9bfc07c262a8e8d1fd19eb4b117a543d77 , build time : Fri, 28 Oct 2022 04:40:21 UTC

xerces-c-devel-3.2.4-1.ph4.x86_64.rpm | size : 1.8M , sha256 : c2fc157d9076d1e2a9baf51d8de150595e6b34d8e42556f46f8716ee3992bc45 , build time : Fri, 28 Oct 2022 04:40:21 UTC

linux-esx-5.10.142-4.ph4.x86_64.rpm | size : 14M , sha256 : a8d7dc10e80e4caa2f0704d1d46a51ff963cc9978b83de4474835db09a3e1d69 , build time : Fri, 28 Oct 2022 06:12:18 UTC

linux-esx-devel-5.10.142-4.ph4.x86_64.rpm | size : 11M , sha256 : 64f705cdfd2154cf5f3d21826990cdddbfb011c4bfb38a435a32593d082e3384 , build time : Fri, 28 Oct 2022 04:46:08 UTC

linux-esx-docs-5.10.142-4.ph4.x86_64.rpm | size : 7.8M , sha256 : 97a95e85b89e9af9b24b00b2819d0fc3f4c7e808c963e1ec46de0ca7ba6b24ef , build time : Fri, 28 Oct 2022 04:46:08 UTC

linux-secure-5.10.142-3.ph4.x86_64.rpm | size : 26M , sha256 : 56c74d90a68ea449fe6c28291a86fb8d605d6b225ae61f6dafe135bf575b89b8 , build time : Fri, 28 Oct 2022 06:12:19 UTC

linux-secure-devel-5.10.142-3.ph4.x86_64.rpm | size : 12M , sha256 : 786a3b34f253ee28d58d654860e28d6345e1e0877c3db2b15f9ad2b3d6395bc5 , build time : Fri, 28 Oct 2022 04:45:23 UTC

linux-secure-docs-5.10.142-3.ph4.x86_64.rpm | size : 7.8M , sha256 : de6a29ebe6d90d3d9042c08174f890bb4087f1e1fc79953f9f651f611c7bb91e , build time : Fri, 28 Oct 2022 04:45:23 UTC

libtasn1-4.14-2.ph4.x86_64.rpm | size : 60K , sha256 : 180ffb045a16f2da2f3d294faa35fcf66d6406fb8ca151b50e9f91075b298359 , build time : Fri, 28 Oct 2022 04:40:21 UTC

libtasn1-devel-4.14-2.ph4.x86_64.rpm | size : 92K , sha256 : 3ec762afde092708781b0813d741a6acb36d4d158df9eb8e00129f3c5a1b42d5 , build time : Fri, 28 Oct 2022 04:40:21 UTC

linux-aws-5.10.142-3.ph4.x86_64.rpm | size : 24M , sha256 : 257306bcd1f98860a0e92eb2d7e238dbef2aae3bcae158c08b6377f68bfac658 , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-devel-5.10.142-3.ph4.x86_64.rpm | size : 12M , sha256 : 3c4b740a9671fee7c4f790797e610642c5d0ed840dfe07f59c90350e7b7a565f , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-docs-5.10.142-3.ph4.x86_64.rpm | size : 7.8M , sha256 : f20ef36d65f3062dea2ee8431e314e67b0e265a785b4af427c95f7381e8d4193 , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-drivers-gpu-5.10.142-3.ph4.x86_64.rpm | size : 2.3M , sha256 : 02966effbbeaea0765c21f78a6383c04c5a3d3beb662fb177635eb7b2599625d , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-oprofile-5.10.142-3.ph4.x86_64.rpm | size : 44K , sha256 : cd1ee50cdaec35569b473aefce5795902b4686bfb2377cfd3731a9ec01c36382 , build time : Fri, 28 Oct 2022 04:42:13 UTC

linux-aws-sound-5.10.142-3.ph4.x86_64.rpm | size : 268K , sha256 : 0e576701950adaeb52afc513e159b3b86ce848a4db7f33f4de9f2cbed9688d37 , build time : Fri, 28 Oct 2022 04:42:13 UTC

git-2.35.5-1.ph4.x86_64.rpm | size : 4.1M , sha256 : 76f9d0c19da9d19c48d4fdec1080515b247c66e3475ca689a181595d467c928e , build time : Fri, 28 Oct 2022 04:41:54 UTC

git-lang-2.35.5-1.ph4.x86_64.rpm | size : 1.5M , sha256 : cd4c73202c459c3abf70f51f33dad7cfbb186220ed23550aec70fb2308e0d150 , build time : Fri, 28 Oct 2022 04:41:54 UTC

linux-rt-5.10.142-3.ph4.x86_64.rpm | size : 30M , sha256 : 9766fd708a76bb5c5076b24403d6b1f74a714d76820bfbae95ff1292ee404b6c , build time : Fri, 28 Oct 2022 06:14:34 UTC

linux-rt-devel-5.10.142-3.ph4.x86_64.rpm | size : 12M , sha256 : a0452d76bdf123853d529df253dfd4b0da1e74b43ac961a451c736de87a86ea9 , build time : Fri, 28 Oct 2022 04:46:32 UTC

linux-rt-docs-5.10.142-3.ph4.x86_64.rpm | size : 7.8M , sha256 : ec925189c0822be459ac54401d44d1f36ee5d156de85e7690cb9f91f07ed5a02 , build time : Fri, 28 Oct 2022 04:46:32 UTC

curl-7.86.0-1.ph4.x86_64.rpm | size : 152K , sha256 : b13183c21f72c81ac18cc8c2da4e790bc989cd97a58a803c51e9ccd978ebb1c9 , build time : Fri, 28 Oct 2022 04:40:24 UTC

curl-devel-7.86.0-1.ph4.x86_64.rpm | size : 812K , sha256 : 7222eb57cd4d58e29e265e6476bb214ebf002fb8f88a44b1d19a4a7fe10e168d , build time : Fri, 28 Oct 2022 04:40:24 UTC

curl-libs-7.86.0-1.ph4.x86_64.rpm | size : 284K , sha256 : 8a0c5556cd2890cbbab6ae079ad9cde73aff755cb4aee19dc375c9b21a04f078 , build time : Fri, 28 Oct 2022 04:40:24 UTC