Security Update 4.0 496

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2023-4.0-0496

Type : Security

Severity : ['Important']

Issue date : 2023-10-25

Affected Release: 4.0

Details

Updates of ['openssl', 'nghttp2'] packages of Photon OS have been released.

Affected Packages

Important

openssl - ['CVE-2023-5363']

nghttp2 - ['CVE-2023-35945', 'CVE-2023-44487']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

openssl-3.0.9-7.ph4.x86_64.rpm | size : 2.3M , sha256 : aefced6fd29f43714c4801ce762942ef93ed7deb0a19edd6ca5ff0baa638f1dc , build time : Wed, 25 Oct 2023 02:52:17 UTC

openssl-c_rehash-3.0.9-7.ph4.x86_64.rpm | size : 16K , sha256 : 40e5cc385a478a8d248db96345fae0928c91141dc8178229ca5a7c28e532b2ea , build time : Wed, 25 Oct 2023 02:52:17 UTC

openssl-devel-3.0.9-7.ph4.x86_64.rpm | size : 4.8M , sha256 : 68572eaaba068f1a8d5d7df6892d910f401e0f48cb469fdbfd35e83dd826911b , build time : Wed, 25 Oct 2023 02:52:17 UTC

openssl-docs-3.0.9-7.ph4.x86_64.rpm | size : 2.0M , sha256 : fefbfccbd6d19f0ddebd240180b652d50f6112f4805959ca732e382ff0e868ab , build time : Wed, 25 Oct 2023 02:52:17 UTC

openssl-perl-3.0.9-7.ph4.x86_64.rpm | size : 20K , sha256 : c465ad6546f99c9bface39c1a730b7900981f1b3963cdbb99e833af60abc324b , build time : Wed, 25 Oct 2023 02:52:17 UTC

nghttp2-1.57.0-1.ph4.x86_64.rpm | size : 100K , sha256 : 45540fd20a43c0adb8588b55855b7856ccdf01fd33e8a608211e267287061a04 , build time : Wed, 25 Oct 2023 02:55:51 UTC

nghttp2-devel-1.57.0-1.ph4.x86_64.rpm | size : 80K , sha256 : 8087bba16eca50cc4d64bdb80ec18658dbf453c2bd4ec0834cc8849410c1c300 , build time : Wed, 25 Oct 2023 02:55:51 UTC