Security Update 3.0 602

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-3.0-0602

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2023-06-21

Affected Release: 3.0

Details

Updates of ['syslinux', 'nodejs'] packages of Photon OS have been released.

Affected Packages

Critical

syslinux - ['CVE-2017-12652']

nodejs - ['CVE-2019-5866']

Important

syslinux - ['CVE-2015-0973', 'CVE-2018-14550', 'CVE-2016-3751']

nodejs - ['CVE-2021-21230', 'CVE-2020-6434', 'CVE-2021-21227', 'CVE-2020-6447', 'CVE-2021-30551', 'CVE-2021-30599', 'CVE-2021-30517', 'CVE-2020-6419', 'CVE-2021-21220', 'CVE-2020-6533', 'CVE-2019-5807', 'CVE-2019-5831', 'CVE-2018-16065', 'CVE-2021-21231', 'CVE-2019-13696', 'CVE-2020-6537', 'CVE-2021-30541', 'CVE-2020-6383', 'CVE-2020-6507', 'CVE-2021-30598', 'CVE-2020-6512', 'CVE-2019-5843', 'CVE-2019-5841', 'CVE-2021-38007', 'CVE-2018-17458', 'CVE-2019-5813', 'CVE-2020-6415', 'CVE-2019-13735', 'CVE-2020-6379', 'CVE-2021-4061', 'CVE-2020-6448', 'CVE-2020-6382', 'CVE-2019-13698', 'CVE-2020-6468', 'CVE-2018-17465', 'CVE-2020-6518', 'CVE-2020-6418', 'CVE-2019-13764', 'CVE-2020-6381', 'CVE-2021-30513', 'CVE-2020-6453', 'CVE-2021-21169', 'CVE-2019-13728', 'CVE-2020-6430', 'CVE-2021-37975', 'CVE-2020-15979', 'CVE-2019-13730']

Moderate

syslinux - ['CVE-2018-13785', 'CVE-2014-9495', 'CVE-2019-6129', 'CVE-2021-4214', 'CVE-2018-14048']

nodejs - ['CVE-2019-5847', 'CVE-2019-5825', 'CVE-2019-13670', 'CVE-2020-16040', 'CVE-2020-16042', 'CVE-2019-5784', 'CVE-2023-0466', 'CVE-2020-6395']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

syslinux-6.04-8.ph3.x86_64.rpm | size : 1.2M , sha256 : 0031696792ebec8cc1d2f5ef8c8b3457b4ba5478fc6cc266edf185712f06c02b , build time : Tue, 20 Jun 2023 22:16:11 UTC

syslinux-devel-6.04-8.ph3.x86_64.rpm | size : 272K , sha256 : 4b48136952042e71651b81abd4a104c8fc3ad3d0048cc25ee234098b065fbce6 , build time : Tue, 20 Jun 2023 22:16:11 UTC

nodejs-16.20.0-1.ph3.x86_64.rpm | size : 31M , sha256 : fa37e76c15477a672c51023d3b91d8512ea0b5481cdedd3daf43cd763bb38964 , build time : Tue, 20 Jun 2023 22:24:01 UTC

nodejs-devel-16.20.0-1.ph3.x86_64.rpm | size : 648K , sha256 : d46457f19ad90d00d6c6ffc6e06a3ba277a4731badd595d6921f38a9ac4315a4 , build time : Tue, 20 Jun 2023 22:24:01 UTC