Security Update 4.0 166

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2022-4.0-0166

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2022-03-25

Affected Release: 4.0

Details

Updates of ['squashfs-tools', 'bluez', 'consul', 'httpd'] packages of Photon OS have been released.

Affected Packages

Critical

httpd - ['CVE-2022-22720', 'CVE-2022-22721', 'CVE-2022-23943']

Important

squashfs-tools - ['CVE-2021-41072', 'CVE-2021-40153']

bluez - ['CVE-2022-0204']

httpd - ['CVE-2022-22719']

Moderate

consul - ['CVE-2022-24687']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

squashfs-tools-4.5.1-1.ph4.x86_64.rpm | size : 168K , sha256 : 788ecf9f93ab050a1e921c2e63dc94e9ed11c9ff2a4c783eb9d354598374d083 , build time : Fri, 25 Mar 2022 02:55:50 UTC

bluez-5.58-4.ph4.x86_64.rpm | size : 1.4M , sha256 : 6e2204d9fb54f97340468f04b7bddb3afeafcad71876632f9a5daf0c7ea5695f , build time : Fri, 25 Mar 2022 03:00:44 UTC

bluez-devel-5.58-4.ph4.x86_64.rpm | size : 52K , sha256 : c3378d535c91f88b6c5bbf6aa6bc76808fa8eb0d87158362573fc38db082376c , build time : Fri, 25 Mar 2022 03:00:44 UTC

consul-1.9.15-1.ph4.x86_64.rpm | size : 15M , sha256 : 0de6a461ebfd5d024c9c3c9f187711ea8814e9b462f1dd3022ff0c5f6fa8cc30 , build time : Fri, 25 Mar 2022 02:59:19 UTC

httpd-2.4.53-1.ph4.x86_64.rpm | size : 1.7M , sha256 : cadce5a3a3faf3a37c23cc25e858ecb04e3f096329c0c0196c3dd31f82c42dc8 , build time : Fri, 25 Mar 2022 03:07:01 UTC

httpd-devel-2.4.53-1.ph4.x86_64.rpm | size : 172K , sha256 : 74fb5c3811ae68dc7d78dd07f94e66990f920b77ae53afb386a1ed3a55452c16 , build time : Fri, 25 Mar 2022 03:07:01 UTC

httpd-docs-2.4.53-1.ph4.x86_64.rpm | size : 3.8M , sha256 : a50c16a0f1045d4b2655d196cb7ea1acf67a13c82ae2ff60b1787d885f17c0b7 , build time : Fri, 25 Mar 2022 03:07:01 UTC

httpd-tools-2.4.53-1.ph4.x86_64.rpm | size : 20K , sha256 : 8e643fc20c3e9ff35e16de142a99d3e1fcfeff19bfc9db140d98ada1175017db , build time : Fri, 25 Mar 2022 03:07:01 UTC