photon-os-advisories/advisories/PHSA-2020-0276.json

{
    "affected": [
        {
            "package": {
                "ecosystem": "photon:1.0",
                "name": "nginx",
                "purl": "pkg:rpm/vmware/nginx?distro=photon-1"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "1.16.1-2.ph1"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:1.0",
                "name": "python3",
                "purl": "pkg:rpm/vmware/python3?distro=photon-1"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "3.5.6-13.ph1"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:2.0",
                "name": "go",
                "purl": "pkg:rpm/vmware/go?distro=photon-2"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "1.13.5-3.ph2"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        }
    ],
    "id": "PHSA-2020-0276",
    "modified": "2023-04-28T05:25:06Z",
    "published": "2020-02-13T00:00:00Z",
    "references": [
        {
            "type": "ADVISORY",
            "url": "https://github.com/vmware/photon/wiki/Security-Update-1.0-276"
        },
        {
            "type": "ADVISORY",
            "url": "https://github.com/vmware/photon/wiki/Security-Update-2.0-276"
        }
    ],
    "related": [
        "CVE-2019-9674",
        "CVE-2019-20372",
        "CVE-2020-16845"
    ]
}