Security Updates 3.0 186

[Important] Photon OS Security Update

Summary

Advisory ID : PHSA-2021-3.0-0186
Type : Security
Severity : ['Important', 'Moderate']
Issued on : 2021-01-22
Affected Versions : Photon OS 3.0

Details

An update of {'sudo', 'nodejs', 'dnsmasq', 'atftp'} packages of Photon OS has been released.

Affected Packages:

Important

sudo - ['CVE-2021-23240']
nodejs - ['CVE-2020-8265']
dnsmasq - ['CVE-2020-25682', 'CVE-2020-25681']
atftp - ['CVE-2020-6097']

Moderate

dnsmasq - ['CVE-2020-25684', 'CVE-2020-25683', 'CVE-2020-25686', 'CVE-2020-25687', 'CVE-2020-25685']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

atftp-0.7.2-2.ph3.x86_64.rpm , sha256 : 8e9a17ec060bcfd7bcc5c0cdd828eb18f4c048e33c42b495c350f92b87fef88a , size : 48K , build_date : Thu, 21 Jan 2021 17:53:13 UTC
atftp-client-0.7.2-2.ph3.x86_64.rpm , sha256 : d879eb5988d52d582630bffcd5e6f06d3a9324724ec527e8087ebbe3d4958aa7 , size : 40K , build_date : Thu, 21 Jan 2021 17:53:13 UTC
dnsmasq-2.82-1.ph3.x86_64.rpm , sha256 : 7f8416b9f5fed9697310e662ec0e54d5283055351772868d5fbde53cc25d644c , size : 266K , build_date : Thu, 21 Jan 2021 17:49:14 UTC
dnsmasq-utils-2.82-1.ph3.x86_64.rpm , sha256 : efe612a9cef4d6fdf97d231778382e0a989fcf3ed19c019540a24a7e08970a2b , size : 24K , build_date : Thu, 21 Jan 2021 17:49:14 UTC
nodejs-10.22.1-2.ph3.x86_64.rpm , sha256 : 53dcc68e240f651c8ef2e13c05f72a7789f3f971ac903b190bcc04b516ca37f4 , size : 20M , build_date : Thu, 21 Jan 2021 17:57:58 UTC
nodejs-devel-10.22.1-2.ph3.x86_64.rpm , sha256 : 5e1aaa2e6da4da48dd14f26785b7e14b60b316f831d8fa106d83891c4815418e , size : 576K , build_date : Thu, 21 Jan 2021 17:57:58 UTC
sudo-1.9.5-1.ph3.x86_64.rpm , sha256 : 49ca46f9367ba9adb68c1964ee48cbcf91d0613d279bb8f73d5c5e0c936b466d , size : 1.8M , build_date : Thu, 21 Jan 2021 17:50:56 UTC