Security Update 4.0 426

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-4.0-0426

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2023-07-13

Affected Release: 4.0

Details

Updates of ['git-lfs', 'curl', 'binutils', 'binutils-aarch64-linux-gnu'] packages of Photon OS have been released.

Affected Packages

Critical

git-lfs - ['CVE-2020-27955']

Important

binutils-aarch64-linux-gnu - ['CVE-2021-20294', 'CVE-2021-45078']

Moderate

curl - ['CVE-2023-28320']

binutils - ['CVE-2021-20197']

binutils-aarch64-linux-gnu - ['CVE-2021-20197', 'CVE-2023-1972', 'CVE-2022-4285']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

git-lfs-3.2.0-1.ph4.x86_64.rpm | size : 3.7M , sha256 : 4b06329e6b2ab7459be0168b2d40c6297ebee56a5815f531dcfbd3554b1e49f1 , build time : Wed, 12 Jul 2023 21:42:15 UTC

curl-8.1.2-1.ph4.x86_64.rpm | size : 160K , sha256 : 8a1d8de814e15df7c194d73272764cb4608ab5502dc97608ab860f3c356335c3 , build time : Wed, 12 Jul 2023 21:41:01 UTC

curl-devel-8.1.2-1.ph4.x86_64.rpm | size : 812K , sha256 : 000a0d727c1511a6e44ce359f7294cb40ba0c721e721147193d93db12fe69fb1 , build time : Wed, 12 Jul 2023 21:41:01 UTC

curl-libs-8.1.2-1.ph4.x86_64.rpm | size : 304K , sha256 : 0f177d8c835d06ad42214638eab78fe3a16faf45580c20ef18e7083f83371327 , build time : Wed, 12 Jul 2023 21:41:01 UTC

binutils-2.35-9.ph4.x86_64.rpm | size : 4.6M , sha256 : 5ad6a8bda8a048a2cc2787f3c5a4394d5990a9185e717a4766fa19e96a0a2201 , build time : Wed, 12 Jul 2023 21:37:01 UTC

binutils-aarch64-linux-gnu-2.35-4.ph4.x86_64.rpm | size : 2.8M , sha256 : 9291d4c9746e33280f0b3d34c0dc455bceffc4e8d562819e3e006eea257ff591 , build time : Wed, 12 Jul 2023 21:40:58 UTC

binutils-devel-2.35-9.ph4.x86_64.rpm | size : 1.1M , sha256 : 9841ccc32d0bf5dd4d7b6f47665fc71fbd2010054bb42dd8ee716471c8b9f4a9 , build time : Wed, 12 Jul 2023 21:37:01 UTC

binutils-libs-2.35-9.ph4.x86_64.rpm | size : 880K , sha256 : 073859be947bd5ce5ef243b34c6e5211352394382a7835582086a28d120fd6eb , build time : Wed, 12 Jul 2023 21:37:01 UTC

binutils-aarch64-linux-gnu-2.35-4.ph4.x86_64.rpm | size : 2.8M , sha256 : 9291d4c9746e33280f0b3d34c0dc455bceffc4e8d562819e3e006eea257ff591 , build time : Wed, 12 Jul 2023 21:40:58 UTC