Critical Photon OS Security Update - PHSA-2021-0007

2021-04-0700:00:00

github.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON

Updates of [‘linux-aws’, ‘containerd’, ‘linux-secure’, ‘glib’, ‘libtiff’, ‘linux-rt’, ‘curl’, ‘linux’, ‘libvirt’, ‘openssl’, ‘mysql’, ‘wpa_supplicant’, ‘apache-tomcat’, ‘python3’, ‘nodejs’, ‘docker’] packages of Photon OS have been released.

OSVersionArchitecturePackageVersionFilename
Photon4.0noarchpython3-pip< 3.9.1-3.ph4python3-pip-3.9.1-3.ph4.noarch.rpm
Photon4.0x86_64linux-aws-sound< 5.10.25-1.ph4linux-aws-sound-5.10.25-1.ph4.x86_64.rpm
Photon4.0x86_64linux-aws-devel< 5.10.25-1.ph4linux-aws-devel-5.10.25-1.ph4.x86_64.rpm
Photon4.0x86_64wpa_supplicant< 2.9-3.ph4wpa_supplicant-2.9-3.ph4.x86_64.rpm
Photon4.0noarchapache-tomcat< 8.5.64-1.ph4apache-tomcat-8.5.64-1.ph4.noarch.rpm
Photon4.0x86_64nodejs-devel< 14.16.0-1.ph4nodejs-devel-14.16.0-1.ph4.x86_64.rpm
Photon4.0x86_64linux-python3-perf< 5.10.25-1.ph4linux-python3-perf-5.10.25-1.ph4.x86_64.rpm
Photon4.0x86_64linux-aws< 5.10.25-1.ph4linux-aws-5.10.25-1.ph4.x86_64.rpm
Photon4.0x86_64python3-devel< 3.9.1-3.ph4python3-devel-3.9.1-3.ph4.x86_64.rpm
Photon4.0noarchlinux-api-headers< 5.10.25-1.ph4linux-api-headers-5.10.25-1.ph4.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
Photon	4.0	noarch	python3-pip	< 3.9.1-3.ph4	python3-pip-3.9.1-3.ph4.noarch.rpm
Photon	4.0	x86_64	linux-aws-sound	< 5.10.25-1.ph4	linux-aws-sound-5.10.25-1.ph4.x86_64.rpm
Photon	4.0	x86_64	linux-aws-devel	< 5.10.25-1.ph4	linux-aws-devel-5.10.25-1.ph4.x86_64.rpm
Photon	4.0	x86_64	wpa_supplicant	< 2.9-3.ph4	wpa_supplicant-2.9-3.ph4.x86_64.rpm
Photon	4.0	noarch	apache-tomcat	< 8.5.64-1.ph4	apache-tomcat-8.5.64-1.ph4.noarch.rpm
Photon	4.0	x86_64	nodejs-devel	< 14.16.0-1.ph4	nodejs-devel-14.16.0-1.ph4.x86_64.rpm
Photon	4.0	x86_64	linux-python3-perf	< 5.10.25-1.ph4	linux-python3-perf-5.10.25-1.ph4.x86_64.rpm
Photon	4.0	x86_64	linux-aws	< 5.10.25-1.ph4	linux-aws-5.10.25-1.ph4.x86_64.rpm
Photon	4.0	x86_64	python3-devel	< 3.9.1-3.ph4	python3-devel-3.9.1-3.ph4.x86_64.rpm
Photon	4.0	noarch	linux-api-headers	< 5.10.25-1.ph4	linux-api-headers-5.10.25-1.ph4.noarch.rpm