Security Update 5.0 11

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-5.0-0011

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2023-05-24

Affected Release: 5.0

Details

Updates of ['gnupg', 'nodejs'] packages of Photon OS have been released.

Affected Packages

Critical

gnupg - ['CVE-2022-3515']

Important

nodejs - ['CVE-2023-23918', 'CVE-2023-23919', 'CVE-2022-3786', 'CVE-2022-3602', 'CVE-2022-43548']

Moderate

gnupg - ['CVE-2022-34903']

nodejs - ['CVE-2023-23920']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

gnupg-2.2.41-1.ph5.x86_64.rpm | size : 2.5M , sha256 : ecf43eab9d3cf6d5d2907572591ce55f09140664f52abe756443a3aeee107e31 , build time : Wed, 24 May 2023 16:42:58 UTC

nodejs-18.16.0-1.ph5.x86_64.rpm | size : 25M , sha256 : b029e27b364874e105f6f0f29cc1c6894fea8050257e81e3453521f9726685df , build time : Wed, 24 May 2023 16:43:00 UTC

nodejs-devel-18.16.0-1.ph5.x86_64.rpm | size : 864K , sha256 : c143e9dae9aab7069b3835fa5752f3372c421043d03d6c08f9c6fdf95b01b19e , build time : Wed, 24 May 2023 16:43:00 UTC