An update of the vim package has been released.

An update of the libsepol package has been released.

An update of the apache package has been released.

An update of the httpd package has been released.

An update of the containerd package has been released.

  - containerd is an open source container runtime with an emphasis on simplicity, robustness and portability.
    A bug was found in containerd where container root directories and some plugins had insufficiently     restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and     execute programs. When containers included executable programs with extended permission bits (such as     setuid), unprivileged Linux users could discover and execute those programs. When the UID of an     unprivileged Linux user on the host collided with the file owner or group inside a container, the     unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has     been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are     released and may restart containers or update directory permissions to mitigate the vulnerability. Users     unable to update should limit access to the host to trusted users. Update directory permission on     container bundles directories. (CVE-2021-41103)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the docker package has been released.

  - Moby is an open-source project created by Docker to enable software containerization. A bug was found in     Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container     can result in Unix file permission changes for existing files in the hosts filesystem, widening access     to others. This bug does not directly allow files to be read, modified, or executed without an additional     cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this     version as soon as possible. Running containers do not need to be restarted. (CVE-2021-41089)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the openssh package has been released.

  - sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows     privilege escalation because supplemental groups are not initialized as expected. Helper programs for     AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group     memberships of the sshd process, if the configuration specifies running the command as a different user.
    (CVE-2021-41617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the openssh package has been released.

  - sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows     privilege escalation because supplemental groups are not initialized as expected. Helper programs for     AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group     memberships of the sshd process, if the configuration specifies running the command as a different user.
    (CVE-2021-41617)

  - OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username     and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a     challenge is sent only when that combination could be valid for a login session. (CVE-2016-20012)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the vim package has been released.

  - vim is vulnerable to Use After Free (CVE-2021-3796)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

  - u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to     improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for     a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon     Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon     Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W,     MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150 (CVE-2020-3702)

  - A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in     the Linux kernel through 5.13.13. (CVE-2021-40490)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the httpd package has been released.

  - A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the     remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. (CVE-2021-40438)

  - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP     Server 2.4.48 and earlier. (CVE-2021-34798)

  - A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and     crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive). (CVE-2021-36160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the vim package has been released.

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2021-3778)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the atftp package has been released.

  - tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly     consider the combination of data, OACK, and other options. (CVE-2021-41054)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the httpd package has been released.

  - A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead     to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.
    (CVE-2021-33193)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the apache package has been released.

  - Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate     incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially     crafted packet could be used to trigger an infinite loop resulting in a denial of service.
    (CVE-2021-41079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libgcrypt package has been released.

  - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent     blinding to address a side-channel attack against mpi_powm, and the window size is not chosen     appropriately. This, for example, affects use of ElGamal in OpenPGP. (CVE-2021-33560)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the python3 package has been released.

  - A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through     1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious     input to the blame functionality. (CVE-2020-29651)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libsepol package has been released.

  - The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from     cil_reset_classperms_set and cil_reset_classperms_list). (CVE-2021-36086)

  - The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from
    __cil_verify_classpermission and __cil_pre_verify_helper). (CVE-2021-36084)

  - The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from
    __verify_map_perm_classperms and hashtab_map). (CVE-2021-36085)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the python package has been released.

  - A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through     1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious     input to the blame functionality. (CVE-2020-29651)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the docker package has been released.

  - Moby is an open-source project created by Docker to enable software containerization. A bug was found in     Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container     can result in Unix file permission changes for existing files in the hosts filesystem, widening access     to others. This bug does not directly allow files to be read, modified, or executed without an additional     cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this     version as soon as possible. Running containers do not need to be restarted. (CVE-2021-41089)

  - containerd is an open source container runtime with an emphasis on simplicity, robustness and portability.
    A bug was found in containerd where container root directories and some plugins had insufficiently     restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and     execute programs. When containers included executable programs with extended permission bits (such as     setuid), unprivileged Linux users could discover and execute those programs. When the UID of an     unprivileged Linux user on the host collided with the file owner or group inside a container, the     unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has     been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are     released and may restart containers or update directory permissions to mitigate the vulnerability. Users     unable to update should limit access to the host to trusted users. Update directory permission on     container bundles directories. (CVE-2021-41103)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the kubernetes package has been released.

  - A security issue was discovered in Kubernetes where a user may be able to create a container with subpath     volume mounts to access files & directories outside of the volume, including on the host filesystem.
    (CVE-2021-25741)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libtiff package has been released.

  - In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an     abort, resulting in a remote denial of service attack. (CVE-2020-35522)

  - A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can     lead to an abort, resulting in denial of service. (CVE-2020-35521)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the consul package has been released.

  - An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index     validation, aka the skippy peanut butter issue. (CVE-2021-3121)

  - HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid     certificate signed by the same CA to access server-only functionality, enabling privilege escalation.
    Fixed in 1.8.15, 1.9.9 and 1.10.2. (CVE-2021-37219)

  - HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for     other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2. (CVE-2021-38698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the haproxy package has been released.

  - An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform     an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs     and possibly other ACLs. (CVE-2021-40346)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the python package has been released.

  - urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as     demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this     is similar to CVE-2020-26116. (CVE-2020-26137)

  - urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts or transmitted in cleartext. (CVE-2018-20060)

  - In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

  - The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA     certificates is different from the OS store of CA certificates, which results in SSL connections     succeeding in situations where a verification failure is the correct outcome. This is related to use of     the ssl_context, ca_certs, or ca_certs_dir argument. (CVE-2019-11324)

  - An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in     the authority component, the authority regular expression exhibits catastrophic backtracking, causing a     denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.
    (CVE-2021-33503)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the git package has been released.

  - git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,     which may result in unexpected cross-protocol requests, as demonstrated by the     git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. (CVE-2021-40330)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the curl package has been released.

  - When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously     keep a pointer to an already freed memory area and both use that again in a subsequent call to send data     and also free it *again*. (CVE-2021-22945)

  - A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an     IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL`     or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly     crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations
    **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear     text over the network. (CVE-2021-22946)

  - When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to     upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches.
    curl would then upgrade to TLS but not flush the in-queue of cached responses but instead continue using     and trustingthe responses it got *before* the TLS handshake as if they were authenticated.Using this flaw,     it allows a Man-In-The-Middle attacker to first inject the fake responses, then pass-through the TLS     traffic from the legitimate server and trick curl into sending data back to the user thinking the     attacker's injected data comes from the TLS-protected server. (CVE-2021-22947)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the ruby package has been released.

  - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP     server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port.
    This potentially makes curl extract information about services that are otherwise private and not     disclosed (e.g., the attacker can conduct port scans and service banner extractions). (CVE-2021-31810)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
154025	Photon OS 2.0: Vim PHSA-2021-2.0-0403	high
153990	Photon OS 3.0: Libsepol PHSA-2021-3.0-0303	low
153988	Photon OS 3.0: Apache PHSA-2021-3.0-0312	high
153987	Photon OS 3.0: Vim PHSA-2021-3.0-0312	high
153986	Photon OS 3.0: Httpd PHSA-2021-3.0-0312	critical
153980	Photon OS 2.0: Containerd PHSA-2021-2.0-0402	high
153979	Photon OS 2.0: Docker PHSA-2021-2.0-0402	medium
153975	Photon OS 1.0: Openssh PHSA-2021-1.0-0440	high
153974	Photon OS 4.0: Containerd PHSA-2021-4.0-0113	high
153973	Photon OS 4.0: Docker PHSA-2021-4.0-0113	medium
153972	Photon OS 4.0: Openssh PHSA-2021-4.0-0113	high
153971	Photon OS 4.0: Vim PHSA-2021-4.0-0113	high
153963	Photon OS 2.0: Linux PHSA-2021-2.0-0399	high
153962	Photon OS 2.0: Httpd PHSA-2021-2.0-0399	critical
153961	Photon OS 3.0: Httpd PHSA-2021-3.0-0309	critical
153960	Photon OS 3.0: Vim PHSA-2021-3.0-0309	high
153958	Photon OS 1.0: Atftp PHSA-2021-1.0-0437	high
153957	Photon OS 1.0: Httpd PHSA-2021-1.0-0437	critical
153956	Photon OS 2.0: Atftp PHSA-2021-2.0-0400	high
153955	Photon OS 2.0: Vim PHSA-2021-2.0-0400	high
153946	Photon OS 3.0: Docker PHSA-2021-3.0-0311	medium
153945	Photon OS 3.0: Containerd PHSA-2021-3.0-0311	high
153939	Photon OS 3.0: Httpd PHSA-2021-3.0-0305	high
153938	Photon OS 1.0: Apache PHSA-2021-1.0-0438	high
153937	Photon OS 4.0: Libgcrypt PHSA-2021-4.0-0051	high
153936	Photon OS 4.0: Python3 PHSA-2021-4.0-0051	high
153935	Photon OS 1.0: Libsepol PHSA-2021-1.0-0435	low
153934	Photon OS 2.0: Libsepol PHSA-2021-2.0-0395	low
153933	Photon OS 2.0: Python PHSA-2021-2.0-0362	high
153930	Photon OS 4.0: Vim PHSA-2021-4.0-0110	high
153929	Photon OS 1.0: Docker PHSA-2021-1.0-0439	high
153928	Photon OS 2.0: Apache PHSA-2021-2.0-0401	high
153927	Photon OS 4.0: Kubernetes PHSA-2021-4.0-0112	high
153757	Photon OS 2.0: Libtiff PHSA-2021-2.0-0394	medium
153756	Photon OS 2.0: Kubernetes PHSA-2021-2.0-0394	high
153753	Photon OS 3.0: Kubernetes PHSA-2021-3.0-0303	high
153752	Photon OS 3.0: Libtiff PHSA-2021-3.0-0303	medium
153751	Photon OS 3.0: Consul PHSA-2021-3.0-0303	high
153750	Photon OS 3.0: Haproxy PHSA-2021-3.0-0303	high
153745	Photon OS 4.0: Consul PHSA-2021-4.0-0105	high
153744	Photon OS 2.0: Python PHSA-2021-2.0-0393	medium
153743	Photon OS 2.0: Httpd PHSA-2021-2.0-0393	high
153742	Photon OS 2.0: Haproxy PHSA-2021-2.0-0393	high
153725	Photon OS 4.0: Haproxy PHSA-2021-4.0-0104	high
153691	Photon OS 1.0: Haproxy PHSA-2021-1.0-0435	high
153690	Photon OS 1.0: Kubernetes PHSA-2021-1.0-0435	high
153689	Photon OS 1.0: Httpd PHSA-2021-1.0-0435	high
153506	Photon OS 1.0: Git PHSA-2021-1.0-0433	high
153505	Photon OS 2.0: Curl PHSA-2021-2.0-0392	critical
153504	Photon OS 4.0: Ruby PHSA-2021-4.0-0096	medium

PhotonOS Local Security Checks Family for Nessus

high

low

high

high

critical

high

medium

high

high

medium

high

high

high

critical

critical

high

high

critical

high

high

medium

high

high

high

high

high

low

low

high

high

high

high

high

medium

high

high

medium

high

high

high

medium

high

high

high

high

high

high

high

critical

medium