{ "affected": [ { "package": { "ecosystem": "Photon OS:1.0", "name": "mariadb", "purl": "pkg:rpm/vmware/mariadb?distro=photon-1" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "10.2.43-1.ph1" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:1.0", "name": "go", "purl": "pkg:rpm/vmware/go?distro=photon-1" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "1.17.2-1.ph1" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:1.0", "name": "expat", "purl": "pkg:rpm/vmware/expat?distro=photon-1" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "2.2.9-7.ph1" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:2.0", "name": "openldap", "purl": "pkg:rpm/vmware/openldap?distro=photon-2" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "2.4.57-3.ph2" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:2.0", "name": "libtiff", "purl": "pkg:rpm/vmware/libtiff?distro=photon-2" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "4.3.0-2.ph2" } ], "type": "ECOSYSTEM" } } ], "id": "PHSA-2022-0476", "modified": "2022-05-23T21:38:39Z", "published": "2022-03-03T00:00:00Z", "references": [ { "type": "ADVISORY", "url": "https://github.com/vmware/photon/wiki/Security-Update-1.0-476" }, { "type": "ADVISORY", "url": "https://github.com/vmware/photon/wiki/Security-Update-2.0-476" } ], "related": [ "CVE-2021-46665", "CVE-2021-46663", "CVE-2021-44717", "CVE-2021-33196", "CVE-2022-25315", "CVE-2021-41772", "CVE-2021-36221", "CVE-2021-33195", "CVE-2021-33198", "CVE-2020-28367", "CVE-2021-33197", "CVE-2022-23806", "CVE-2021-46661", "CVE-2022-25314", "CVE-2021-34558", "CVE-2021-39293", "CVE-2022-23772", "CVE-2021-29923", "CVE-2021-3114", "CVE-2021-46668", "CVE-2020-28366", "CVE-2021-46664", "CVE-2021-44716", "CVE-2021-38297", "CVE-2021-41771", "CVE-2021-31525", "CVE-2022-23773", "CVE-2020-29510", "CVE-2021-27918", "CVE-2020-24553", "CVE-2022-0865", "CVE-2022-0909", "CVE-2022-0924", "CVE-2022-0907", "CVE-2022-0908", "CVE-2022-22844", "CVE-2022-29155" ] }