Security Update 4.0 130

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2021-4.0-0130

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2021-11-28

Affected Release: 4.0

Details

Updates of ['lua', 'go', 'kafka', 'librdkafka'] packages of Photon OS have been released.

Affected Packages

Critical

go - ['CVE-2021-38297']

librdkafka - ['CVE-2021-3520']

Important

go - ['CVE-2021-41771', 'CVE-2021-41772', 'CVE-2021-29923']

Moderate

lua - ['CVE-2021-43519']

go - ['CVE-2021-34558', 'CVE-2021-36221']

kafka - ['CVE-2021-38153']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

lua-5.4.3-2.ph4.x86_64.rpm | size : 200K , sha256 : abda2703623e90a414bf5bd3c230487e0782cc89b58b00279dd63b03429c25d9 , build time : Wed, 24 Nov 2021 00:49:51 UTC

lua-devel-5.4.3-2.ph4.x86_64.rpm | size : 24K , sha256 : 431d10c347cb94d1e2a700206886df5a2b648e5c158105d758d23cb547470760 , build time : Wed, 24 Nov 2021 00:49:51 UTC

go-1.17.2-1.ph4.x86_64.rpm | size : 105M , sha256 : 6bc597b91c45e447fa5a72d0a0e13976b2ddcd649c91e403aa13a955c7e529f7 , build time : Wed, 24 Nov 2021 01:20:24 UTC

go-md2man-2.0.0-7.ph4.x86_64.rpm | size : 692K , sha256 : f05c163228336f002d47d57af683c097afecb4643f78d79ecdf0c94446d7f983 , build time : Wed, 24 Nov 2021 01:58:55 UTC

kafka-3.0.0-1.ph4.x86_64.rpm | size : 83M , sha256 : 330bb1826a9765a8c395e165a622e7954931188aceca4554fb9f42b6a2b4b5f9 , build time : Wed, 24 Nov 2021 01:54:22 UTC

librdkafka-1.5.0-2.ph4.x86_64.rpm | size : 636K , sha256 : 941d7006b99c911114687d2dd94721c4e1411796f3f3a659297c1e4286f7c01c , build time : Wed, 24 Nov 2021 01:54:06 UTC

librdkafka-devel-1.5.0-2.ph4.x86_64.rpm | size : 72K , sha256 : 8d0ed6770a1c451df81ec5726ddbc9393150408cd1baac200162306f561f60d4 , build time : Wed, 24 Nov 2021 01:54:06 UTC