2023-07-02 07:37:30 +00:00
|
|
|
{
|
|
|
|
"affected": [
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "ntp",
|
|
|
|
"purl": "pkg:rpm/vmware/ntp?distro=photon-4"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "libtiff",
|
|
|
|
"purl": "pkg:rpm/vmware/libtiff?distro=photon-4"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "docker-compose",
|
|
|
|
"purl": "pkg:rpm/vmware/docker-compose?distro=photon-4"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "libXi",
|
|
|
|
"purl": "pkg:rpm/vmware/libXi?distro=photon-4"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "binutils",
|
|
|
|
"purl": "pkg:rpm/vmware/binutils?distro=photon-4"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "bindutils",
|
|
|
|
"purl": "pkg:rpm/vmware/bindutils?distro=photon-4"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "protobuf",
|
|
|
|
"purl": "pkg:rpm/vmware/protobuf?distro=photon-4"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "kube-bench",
|
|
|
|
"purl": "pkg:rpm/vmware/kube-bench?distro=photon-4"
|
|
|
|
}
|
2023-07-03 14:37:45 +00:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "bindutils",
|
|
|
|
"purl": "pkg:rpm/vmware/bindutils?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "9.16.38-4.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "protobuf",
|
|
|
|
"purl": "pkg:rpm/vmware/protobuf?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "3.19.6-2.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "docker-compose",
|
|
|
|
"purl": "pkg:rpm/vmware/docker-compose?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "2.19.0-1.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "libtiff",
|
|
|
|
"purl": "pkg:rpm/vmware/libtiff?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "4.5.1-1.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "libXi",
|
|
|
|
"purl": "pkg:rpm/vmware/libXi?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "1.7.10-1.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "binutils",
|
|
|
|
"purl": "pkg:rpm/vmware/binutils?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "2.35-8.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "kube-bench",
|
|
|
|
"purl": "pkg:rpm/vmware/kube-bench?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "0.6.12-1.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "ntp",
|
|
|
|
"purl": "pkg:rpm/vmware/ntp?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "4.2.8p16-1.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
2023-07-06 05:38:07 +00:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "nodejs",
|
|
|
|
"purl": "pkg:rpm/vmware/nodejs?distro=photon-4"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "libarchive",
|
|
|
|
"purl": "pkg:rpm/vmware/libarchive?distro=photon-4"
|
|
|
|
}
|
2023-07-06 18:38:11 +00:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "nodejs",
|
|
|
|
"purl": "pkg:rpm/vmware/nodejs?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "18.16.1-1.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "libarchive",
|
|
|
|
"purl": "pkg:rpm/vmware/libarchive?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "3.4.3-10.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
2023-07-11 17:37:34 +00:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "samba-client",
|
|
|
|
"purl": "pkg:rpm/vmware/samba-client?distro=photon-4"
|
|
|
|
}
|
2023-07-19 02:26:39 +00:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "samba-client",
|
|
|
|
"purl": "pkg:rpm/vmware/samba-client?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "4.18.3-1.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
2023-07-22 05:37:15 +00:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "binutils-aarch64-linux-gnu",
|
|
|
|
"purl": "pkg:rpm/vmware/binutils-aarch64-linux-gnu?distro=photon-4"
|
|
|
|
}
|
2023-07-27 01:54:24 +00:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"package": {
|
|
|
|
"ecosystem": "Photon OS:4.0",
|
|
|
|
"name": "binutils-aarch64-linux-gnu",
|
|
|
|
"purl": "pkg:rpm/vmware/binutils-aarch64-linux-gnu?distro=photon-4"
|
|
|
|
},
|
|
|
|
"ranges": {
|
|
|
|
"events": [
|
|
|
|
{
|
|
|
|
"introduced": "0"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"fixed": "2.35-3.ph4"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"type": "ECOSYSTEM"
|
|
|
|
}
|
2023-07-02 07:37:30 +00:00
|
|
|
}
|
|
|
|
],
|
|
|
|
"id": "PHSA-2023-4.0-0417",
|
2023-09-17 05:37:29 +00:00
|
|
|
"modified": "2023-09-17T05:31:15Z",
|
2023-07-02 07:37:30 +00:00
|
|
|
"published": "2023-06-30T00:00:00Z",
|
|
|
|
"references": [
|
|
|
|
{
|
|
|
|
"type": "ADVISORY",
|
|
|
|
"url": "https://github.com/vmware/photon/wiki/Security-Update-4.0-417"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"related": [
|
|
|
|
"CVE-2023-2828",
|
|
|
|
"CVE-2023-0802",
|
|
|
|
"CVE-2022-3509",
|
|
|
|
"CVE-2023-0800",
|
|
|
|
"CVE-2023-0803",
|
|
|
|
"CVE-2019-15562",
|
|
|
|
"CVE-2023-0801",
|
|
|
|
"CVE-2023-26554",
|
|
|
|
"CVE-2023-25173",
|
|
|
|
"CVE-2023-25434",
|
|
|
|
"CVE-2023-26551",
|
|
|
|
"CVE-2023-26553",
|
|
|
|
"CVE-2023-26965",
|
|
|
|
"CVE-2023-25585",
|
|
|
|
"CVE-2016-7945",
|
|
|
|
"CVE-2023-0798",
|
|
|
|
"CVE-2023-2911",
|
|
|
|
"CVE-2023-26552",
|
|
|
|
"CVE-2023-0804",
|
|
|
|
"CVE-2023-25588",
|
|
|
|
"CVE-2016-7946",
|
|
|
|
"CVE-2023-25584",
|
|
|
|
"CVE-2023-26555",
|
2023-07-06 05:38:07 +00:00
|
|
|
"CVE-2023-0799",
|
|
|
|
"CVE-2023-2650",
|
|
|
|
"CVE-2023-0464",
|
|
|
|
"CVE-2019-19921",
|
|
|
|
"CVE-2023-1255",
|
|
|
|
"CVE-2023-0795",
|
|
|
|
"CVE-2021-36976",
|
|
|
|
"CVE-2023-0796",
|
|
|
|
"CVE-2023-25435",
|
|
|
|
"CVE-2023-27561",
|
|
|
|
"CVE-2022-23471",
|
|
|
|
"CVE-2023-3316",
|
|
|
|
"CVE-2023-0797",
|
|
|
|
"CVE-2023-0465",
|
|
|
|
"CVE-2023-2731",
|
2023-07-11 17:37:34 +00:00
|
|
|
"CVE-2023-25153",
|
2023-07-16 05:37:12 +00:00
|
|
|
"CVE-2020-25720",
|
|
|
|
"CVE-2023-28642",
|
2023-07-22 05:37:15 +00:00
|
|
|
"CVE-2023-25809",
|
2023-09-06 05:37:33 +00:00
|
|
|
"CVE-2022-38533",
|
|
|
|
"CVE-2022-47696",
|
2023-09-17 05:37:29 +00:00
|
|
|
"CVE-2022-47673",
|
|
|
|
"CVE-2023-3618"
|
2023-07-02 07:37:30 +00:00
|
|
|
]
|
|
|
|
}
|