Security Update 3.0 642

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-3.0-0642

Type : Security

Severity : ['Critical', 'Important']

Issue date : 2023-09-01

Affected Release: 3.0

Details

Updates of ['open-vm-tools', 'nodejs'] packages of Photon OS have been released.

Affected Packages

Critical

nodejs - ['CVE-2023-32002']

Important

open-vm-tools - ['CVE-2023-20900']

nodejs - ['CVE-2023-32006', 'CVE-2023-32559']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

open-vm-tools-12.2.0-3.ph3.x86_64.rpm | size : 1.2M , sha256 : e6306815c50a65009e77dcc02d788fa33159099e89dc4266361ee877468f1da0 , build time : Thu, 31 Aug 2023 10:15:55 UTC

open-vm-tools-devel-12.2.0-3.ph3.x86_64.rpm | size : 48K , sha256 : 1e20658c86b2cee6bdf04e62b20f8bc8279ef2019b91f8ffa1c99c7386abb68c , build time : Thu, 31 Aug 2023 10:15:55 UTC

open-vm-tools-sdmp-12.2.0-3.ph3.x86_64.rpm | size : 32K , sha256 : 8ee6c0e93c7085ef6828cde2192819aa5ad727c90ba36e06e996c6a8704dcad8 , build time : Thu, 31 Aug 2023 10:15:55 UTC

nodejs-16.20.2-1.ph3.x86_64.rpm | size : 31M , sha256 : f532bf0c7d7bbd3cf433476b54bb95bae54b81f7816fb75f08b5cbbccfbbb5e0 , build time : Thu, 31 Aug 2023 10:42:19 UTC

nodejs-devel-16.20.2-1.ph3.x86_64.rpm | size : 648K , sha256 : 06b365a6b84f44fbfb5f8327ca23c29c91abffc19bd6824eec126e73c242c86c , build time : Thu, 31 Aug 2023 10:42:19 UTC