{"affected": [{"package": {"ecosystem": "Photon OS:1.0","name": "libgcrypt","purl": "pkg:rpm/vmware/libgcrypt?distro=photon-1"},"ranges": {"events": [{"introduced": "0"},{"fixed": "1.7.6-6.ph1"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:1.0","name": "yarn","purl": "pkg:rpm/vmware/yarn?distro=photon-1"},"ranges": {"events": [{"introduced": "0"},{"fixed": "1.10.1-6.ph1"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:1.0","name": "python2","purl": "pkg:rpm/vmware/python2?distro=photon-1"},"ranges": {"events": [{"introduced": "0"},{"fixed": "2.7.15-16.ph1"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:1.0","name": "openvswitch","purl": "pkg:rpm/vmware/openvswitch?distro=photon-1"},"ranges": {"events": [{"introduced": "0"},{"fixed": "2.6.1-6.ph1"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:1.0","name": "kubernetes","purl": "pkg:rpm/vmware/kubernetes?distro=photon-1"},"ranges": {"events": [{"introduced": "0"},{"fixed": "1.13.12-2.ph1"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:1.0","name": "gnupg","purl": "pkg:rpm/vmware/gnupg?distro=photon-1"},"ranges": {"events": [{"introduced": "0"},{"fixed": "2.2.18-1.ph1"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:2.0","name": "linux-aws","purl": "pkg:rpm/vmware/linux-aws?distro=photon-2"},"ranges": {"events": [{"introduced": "0"},{"fixed": "4.9.237-2.ph2"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:2.0","name": "linux-secure","purl": "pkg:rpm/vmware/linux-secure?distro=photon-2"},"ranges": {"events": [{"introduced": "0"},{"fixed": "4.9.237-1.ph2"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:2.0","name": "icu","purl": "pkg:rpm/vmware/icu?distro=photon-2"},"ranges": {"events": [{"introduced": "0"},{"fixed": "67.1-1.ph2"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:2.0","name": "linux-esx","purl": "pkg:rpm/vmware/linux-esx?distro=photon-2"},"ranges": {"events": [{"introduced": "0"},{"fixed": "4.9.237-1.ph2"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:2.0","name": "linux","purl": "pkg:rpm/vmware/linux?distro=photon-2"},"ranges": {"events": [{"introduced": "0"},{"fixed": "4.9.237-2.ph2"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:2.0","name": "nodejs","purl": "pkg:rpm/vmware/nodejs?distro=photon-2"},"ranges": {"events": [{"introduced": "0"},{"fixed": "10.22.1-1.ph2"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:2.0","name": "gnutls","purl": "pkg:rpm/vmware/gnutls?distro=photon-2"},"ranges": {"events": [{"introduced": "0"},{"fixed": "3.6.15-1.ph2"}],"type": "ECOSYSTEM"}},{"package": {"ecosystem": "Photon OS:1.0","name": "libgcrypt","purl": "pkg:rpm/vmware/libgcrypt?distro=photon-1"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "1.7.6-6.ph1"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:1.0","name": "yarn","purl": "pkg:rpm/vmware/yarn?distro=photon-1"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "1.10.1-6.ph1"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:1.0","name": "python2","purl": "pkg:rpm/vmware/python2?distro=photon-1"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "2.7.15-16.ph1"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:1.0","name": "openvswitch","purl": "pkg:rpm/vmware/openvswitch?distro=photon-1"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "2.6.1-6.ph1"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:1.0","name": "kubernetes","purl": "pkg:rpm/vmware/kubernetes?distro=photon-1"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "1.13.12-2.ph1"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:1.0","name": "gnupg","purl": "pkg:rpm/vmware/gnupg?distro=photon-1"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "2.2.18-1.ph1"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:2.0","name": "linux-aws","purl": "pkg:rpm/vmware/linux-aws?distro=photon-2"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "4.9.237-2.ph2"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:2.0","name": "linux-secure","purl": "pkg:rpm/vmware/linux-secure?distro=photon-2"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "4.9.237-1.ph2"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:2.0","name": "icu","purl": "pkg:rpm/vmware/icu?distro=photon-2"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "67.1-1.ph2"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:2.0","name": "linux-esx","purl": "pkg:rpm/vmware/linux-esx?distro=photon-2"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "4.9.237-1.ph2"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:2.0","name": "linux","purl": "pkg:rpm/vmware/linux?distro=photon-2"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "4.9.237-2.ph2"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:2.0","name": "nodejs","purl": "pkg:rpm/vmware/nodejs?distro=photon-2"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "10.22.1-1.ph2"}],"type": "ECOSYSTEM"}]},{"package": {"ecosystem": "Photon OS:2.0","name": "gnutls","purl": "pkg:rpm/vmware/gnutls?distro=photon-2"},"ranges": [{"events": [{"introduced": "0"},{"fixed": "3.6.15-1.ph2"}],"type": "ECOSYSTEM"}]}],"id": "PHSA-2020-0288","modified": "2025-02-09T09:58:37Z","published": "2020-04-11T00:00:00Z","references": [{"type": "ADVISORY","url": "https://github.com/vmware/photon/wiki/Security-Update-1.0-288"},{"type": "ADVISORY","url": "https://github.com/vmware/photon/wiki/Security-Update-2.0-288"}],"related": ["CVE-2019-15608","CVE-2020-8492","CVE-2019-14855","CVE-2018-17206","CVE-2018-17204","CVE-2019-11250","CVE-2019-12904","CVE-2020-25285","CVE-2020-12771","CVE-2017-14952","CVE-2020-14390","CVE-2020-0427","CVE-2020-10531","CVE-2016-6293","CVE-2020-26088","CVE-2020-12888","CVE-2020-24659","CVE-2017-17484","CVE-2020-14305","CVE-2017-15396","CVE-2020-15436","CVE-2020-14314","CVE-2020-15437","CVE-2020-25641","CVE-2020-25212","CVE-2017-15422","CVE-2016-0494","CVE-2020-12655","CVE-2020-25220","CVE-2020-15393","CVE-2017-7868","CVE-2015-4844","CVE-2017-7867","CVE-2020-25284","CVE-2020-8252","CVE-2016-7415"]}