Security Update 3.0 673

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2023-3.0-0673

Type : Security

Severity : ['Important', 'Moderate', 'Low']

Issue date : 2023-10-26

Affected Release: 3.0

Details

Updates of ['redis', 'libtiff', 'nghttp2'] packages of Photon OS have been released.

Affected Packages

Important

nghttp2 - ['CVE-2023-35945', 'CVE-2023-44487']

Moderate

libtiff - ['CVE-2023-41175', 'CVE-2023-40745']

Low

redis - ['CVE-2023-45145']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

redis-6.2.14-1.ph3.x86_64.rpm | size : 1.8M , sha256 : ea863ed772ffab7c495ca151239de77998858f3166c1c0bf6c17b13406f9654f , build time : Wed, 25 Oct 2023 16:30:30 UTC

libtiff-4.5.1-2.ph3.x86_64.rpm | size : 432K , sha256 : 9b71b775f05c9c84e5a53624521d6f55251dec4a723ec274d50820facaaa1c7a , build time : Wed, 25 Oct 2023 16:30:21 UTC

libtiff-devel-4.5.1-2.ph3.x86_64.rpm | size : 176K , sha256 : 79b54bb8907ff4619d1804c9268a0683489edee9699ebaf68f934f0bdc17272f , build time : Wed, 25 Oct 2023 16:30:21 UTC

nghttp2-1.57.0-1.ph3.x86_64.rpm | size : 108K , sha256 : bd8b000cc56d3611432f923f792e3855bdb860745d523e9e18cecc3ecd4a41e6 , build time : Wed, 25 Oct 2023 16:30:23 UTC

nghttp2-devel-1.57.0-1.ph3.x86_64.rpm | size : 88K , sha256 : f7561254d08f0755c9aa5680c5ad1491a2d1d961e5f23403d8a4bf1cf2d2390c , build time : Wed, 25 Oct 2023 16:30:23 UTC