Security Update 3.0 186

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2021-3.0-0186

Type : Security

Severity : ['Important', 'Moderate', 'Low']

Issue date : 2021-01-22

Affected Release: 3.0

Details

Updates of ['sudo', 'dnsmasq', 'atftp', 'nodejs'] packages of Photon OS have been released.

Affected Packages

Important

sudo - ['CVE-2021-23240']

dnsmasq - ['CVE-2020-25682', 'CVE-2020-25681']

atftp - ['CVE-2020-6097']

nodejs - ['CVE-2020-8265']

Moderate

dnsmasq - ['CVE-2020-25687', 'CVE-2020-25683']

Low

dnsmasq - ['CVE-2020-25684', 'CVE-2020-25685', 'CVE-2020-25686']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

sudo-1.9.5-1.ph3.x86_64.rpm | size : 1.8M , sha256 : 49ca46f9367ba9adb68c1964ee48cbcf91d0613d279bb8f73d5c5e0c936b466d , build time : Thu, 21 Jan 2021 17:50:56 UTC

dnsmasq-2.82-1.ph3.x86_64.rpm | size : 268K , sha256 : 7f8416b9f5fed9697310e662ec0e54d5283055351772868d5fbde53cc25d644c , build time : Thu, 21 Jan 2021 17:49:14 UTC

dnsmasq-utils-2.82-1.ph3.x86_64.rpm | size : 24K , sha256 : efe612a9cef4d6fdf97d231778382e0a989fcf3ed19c019540a24a7e08970a2b , build time : Thu, 21 Jan 2021 17:49:14 UTC

atftp-0.7.2-2.ph3.x86_64.rpm | size : 48K , sha256 : 8e9a17ec060bcfd7bcc5c0cdd828eb18f4c048e33c42b495c350f92b87fef88a , build time : Thu, 21 Jan 2021 17:53:13 UTC

atftp-client-0.7.2-2.ph3.x86_64.rpm | size : 40K , sha256 : d879eb5988d52d582630bffcd5e6f06d3a9324724ec527e8087ebbe3d4958aa7 , build time : Thu, 21 Jan 2021 17:53:13 UTC

nodejs-10.22.1-2.ph3.x86_64.rpm | size : 20M , sha256 : 53dcc68e240f651c8ef2e13c05f72a7789f3f971ac903b190bcc04b516ca37f4 , build time : Thu, 21 Jan 2021 17:57:58 UTC

nodejs-devel-10.22.1-2.ph3.x86_64.rpm | size : 576K , sha256 : 5e1aaa2e6da4da48dd14f26785b7e14b60b316f831d8fa106d83891c4815418e , build time : Thu, 21 Jan 2021 17:57:58 UTC