Security Update 3.0 568

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-3.0-0568

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2023-04-19

Affected Release: 3.0

Details

Updates of ['nasm', 'libevent', 'vim'] packages of Photon OS have been released.

Affected Packages

Critical

nasm - ['CVE-2020-24978']

libevent - ['CVE-2016-10195']

Important

libevent - ['CVE-2016-10196', 'CVE-2016-10197']

vim - ['CVE-2022-3099', 'CVE-2022-3016', 'CVE-2022-2580', 'CVE-2022-3705', 'CVE-2022-2286', 'CVE-2022-2264', 'CVE-2022-2522', 'CVE-2022-3297', 'CVE-2022-3256', 'CVE-2022-2289', 'CVE-2022-2287', 'CVE-2022-3037', 'CVE-2022-2816', 'CVE-2022-2817', 'CVE-2022-2581', 'CVE-2022-2862', 'CVE-2022-2257', 'CVE-2022-2982', 'CVE-2022-2344', 'CVE-2022-3235', 'CVE-2022-2343', 'CVE-2022-3296', 'CVE-2022-2345', 'CVE-2022-2285', 'CVE-2022-4141', 'CVE-2022-2889', 'CVE-2022-3134', 'CVE-2022-2288', 'CVE-2022-2284', 'CVE-2022-3234', 'CVE-2022-3491', 'CVE-2022-3352', 'CVE-2022-2849', 'CVE-2022-2571', 'CVE-2022-2304']

Moderate

nasm - ['CVE-2018-1000886', 'CVE-2021-45257', 'CVE-2019-7147', 'CVE-2018-20535', 'CVE-2018-19755']

vim - ['CVE-2023-1175', 'CVE-2023-1264', 'CVE-2022-3153', 'CVE-2022-2845', 'CVE-2022-4293', 'CVE-2022-2923', 'CVE-2023-1170', 'CVE-2022-2874', 'CVE-2022-2980', 'CVE-2022-3278', 'CVE-2022-2598']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

nasm-2.16.01-1.ph3.x86_64.rpm | size : 596K , sha256 : 065ea14a3c9f642164465489af191cb8118624184ee3d5e3ebc1c376c28b9b2d , build time : Wed, 19 Apr 2023 02:22:54 UTC

nasm-doc-2.16.01-1.ph3.x86_64.rpm | size : 1.1M , sha256 : 977784293c85385ef3fa3c6729b029efc74a10835b276b06b3e59f0622a5e5f6 , build time : Wed, 19 Apr 2023 02:22:54 UTC

libevent-2.1.12-1.ph3.x86_64.rpm | size : 352K , sha256 : 5591a06aa5f41cebe1ac0ddf814e71d6098e3188c812dd361a2b6c93c3260db4 , build time : Wed, 19 Apr 2023 02:22:57 UTC

libevent-devel-2.1.12-1.ph3.x86_64.rpm | size : 108K , sha256 : 97de28566d229d688fd99a662a6895c881cb9fe365acdacf3491c8786a58a305 , build time : Wed, 19 Apr 2023 02:22:57 UTC

vim-8.2.5169-6.ph3.x86_64.rpm | size : 1.7M , sha256 : f5b91dea0c12409a329b2e06af6a9390e19afccd99ca408626b32b0330a6c337 , build time : Wed, 19 Apr 2023 02:23:43 UTC

vim-extra-8.2.5169-6.ph3.x86_64.rpm | size : 12M , sha256 : 55229abc6578b92fd6fd586fedd4f8b761d5e14be4abc15abe43fbb7bf1d80cb , build time : Wed, 19 Apr 2023 02:23:43 UTC