Security Update 3.0 200

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2021-3.0-0200

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2021-02-27

Affected Release: 3.0

Details

Updates of ['openssl', 'salt3', 'openldap', 'go', 'nxtgn-openssl'] packages of Photon OS have been released.

Affected Packages

Critical

salt3 - ['CVE-2021-3144', 'CVE-2021-3148', 'CVE-2021-25282', 'CVE-2021-25283', 'CVE-2021-25281']

Important

openssl - ['CVE-2021-23840']

salt3 - ['CVE-2020-28243', 'CVE-2020-35662']

openldap - ['CVE-2020-36228', 'CVE-2020-36222', 'CVE-2020-36230', 'CVE-2020-36224', 'CVE-2020-36225', 'CVE-2020-36221', 'CVE-2020-36229', 'CVE-2020-36226', 'CVE-2020-36223', 'CVE-2020-36227']

go - ['CVE-2021-3115']

nxtgn-openssl - ['CVE-2021-23840']

Moderate

openssl - ['CVE-2021-23841']

salt3 - ['CVE-2020-28972']

nxtgn-openssl - ['CVE-2021-23841']

Low

openssl - ['CVE-2021-23839']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

openssl-1.0.2y-1.ph3.x86_64.rpm | size : 2.1M , sha256 : d869874a92afc8d929db322b5ac151dec56d69a5052f27b1860af11f3f4ce32c , build time : Fri, 26 Feb 2021 12:01:43 UTC

openssl-c_rehash-1.0.2y-1.ph3.x86_64.rpm | size : 16K , sha256 : 12b7e385fd02f27f6cd910e829253ff34e0c23c79de24a8d99662d37adfe8553 , build time : Fri, 26 Feb 2021 12:01:43 UTC

openssl-devel-1.0.2y-1.ph3.x86_64.rpm | size : 3.2M , sha256 : 7370ca939073fc9e1de5e582a34f868c9ce2f8b0f0bda79bd85e30b7aca9eeaa , build time : Fri, 26 Feb 2021 12:01:43 UTC

openssl-perl-1.0.2y-1.ph3.x86_64.rpm | size : 16K , sha256 : e4eea8edb3dd806b03ec15d86316949fa1f7baf1094589b85fdc9ec60b64651d , build time : Fri, 26 Feb 2021 12:01:43 UTC

salt3-2019.2.8-3.ph3.noarch.rpm | size : 14M , sha256 : 39d51931f65657428c2374725033190c3e3a3a5909d6b23dade4a5c811041c9b , build time : Fri, 26 Feb 2021 12:04:50 UTC

salt3-api-2019.2.8-3.ph3.noarch.rpm | size : 12K , sha256 : 1c67624dfbe3047309a7fe7c9503fb1dd1c4539be9f1b5cc062f2d3e981e3013 , build time : Fri, 26 Feb 2021 12:04:50 UTC

salt3-cloud-2019.2.8-3.ph3.noarch.rpm | size : 16K , sha256 : f90b2dbd80fa29b3c09aa1985d26a8aa9f4fc51cc3ebef3d74928669674c1301 , build time : Fri, 26 Feb 2021 12:04:50 UTC

salt3-master-2019.2.8-3.ph3.noarch.rpm | size : 3.0M , sha256 : b1b83591f9b4a9505bd1b2fbb76d03cf6798368f5f2b95c11ff15c465b2fd9bd , build time : Fri, 26 Feb 2021 12:04:50 UTC

salt3-minion-2019.2.8-3.ph3.noarch.rpm | size : 28K , sha256 : cb6ab4f1274d4bdc70d0b607069633629772140d6379a8fdf11baa3304b26da5 , build time : Fri, 26 Feb 2021 12:04:50 UTC

salt3-proxy-2019.2.8-3.ph3.noarch.rpm | size : 12K , sha256 : 3d0aaeaddde5b30c08f47b7799a40754d53093ad67a667f885c4806a1f581b46 , build time : Fri, 26 Feb 2021 12:04:50 UTC

salt3-spm-2019.2.8-3.ph3.noarch.rpm | size : 12K , sha256 : 84bf00d04887add82439d023c9b8d236e3f2eaffb6a52a36bbdd9a8b57ce9542 , build time : Fri, 26 Feb 2021 12:04:50 UTC

salt3-ssh-2019.2.8-3.ph3.noarch.rpm | size : 12K , sha256 : 0c94ea594ff2d35364e7b75376995ea3315bee537013bf6edeb060501c206828 , build time : Fri, 26 Feb 2021 12:04:50 UTC

salt3-syndic-2019.2.8-3.ph3.noarch.rpm | size : 12K , sha256 : c752a79a798a0af9d4e0202db306431f74a089c142a8175eaf5dac341e84113e , build time : Fri, 26 Feb 2021 12:04:50 UTC

openldap-2.4.57-1.ph3.x86_64.rpm | size : 888K , sha256 : 7230957a2eaae1c56adf81fc5f343ebf62503ab980057e003c20d7e246c4dd6d , build time : Fri, 26 Feb 2021 12:04:22 UTC

go-1.13.15-3.ph3.x86_64.rpm | size : 119M , sha256 : 613a4f9d995dd3e824ab5d51773c65dbaaa5279811d0af489f0f3a47ecca9cc9 , build time : Fri, 26 Feb 2021 12:08:29 UTC

go-md2man-2.0.0-4.ph3.x86_64.rpm | size : 880K , sha256 : 8cacd4d5b02cfe10fb1a92544d02e1a651edf439ba374d5bb9c1124a6f809314 , build time : Fri, 26 Feb 2021 12:10:45 UTC

nxtgn-openssl-1.1.1j-1.ph3.x86_64.rpm | size : 1.9M , sha256 : cc7aeabeae68a1bb82ed3a08bed0c92026f426fc6673d0ede7f9c4dbf80efc59 , build time : Fri, 26 Feb 2021 12:08:57 UTC

nxtgn-openssl-c_rehash-1.1.1j-1.ph3.x86_64.rpm | size : 16K , sha256 : 0de97e0c3bcb653438e32822e0c45a17aa2bcc799751b748bcdae8908f015748 , build time : Fri, 26 Feb 2021 12:08:57 UTC

nxtgn-openssl-devel-1.1.1j-1.ph3.x86_64.rpm | size : 2.1M , sha256 : 196def3ce7fd52833169219365493be688def728e45315104592afa777f0a7ef , build time : Fri, 26 Feb 2021 12:08:57 UTC

nxtgn-openssl-perl-1.1.1j-1.ph3.x86_64.rpm | size : 16K , sha256 : c163f406a553a93c1f84d7596b83821896de70ce3fa4c5778d80fbcb69791e41 , build time : Fri, 26 Feb 2021 12:08:57 UTC