{ "affected": [ { "package": { "ecosystem": "Photon OS:1.0", "name": "envoy", "purl": "pkg:rpm/vmware/envoy?distro=photon-1" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "1.10.0-6.ph1" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:1.0", "name": "ncurses", "purl": "pkg:rpm/vmware/ncurses?distro=photon-1" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "6.0-10.ph1" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:1.0", "name": "unzip", "purl": "pkg:rpm/vmware/unzip?distro=photon-1" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "6.0-12.ph1" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:2.0", "name": "zeromq", "purl": "pkg:rpm/vmware/zeromq?distro=photon-2" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "4.1.4-5.ph2" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:2.0", "name": "kibana", "purl": "pkg:rpm/vmware/kibana?distro=photon-2" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "6.8.12-1.ph2" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:2.0", "name": "elasticsearch", "purl": "pkg:rpm/vmware/elasticsearch?distro=photon-2" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "6.8.12-1.ph2" } ], "type": "ECOSYSTEM" } }, { "package": { "ecosystem": "Photon OS:2.0", "name": "postgresql", "purl": "pkg:rpm/vmware/postgresql?distro=photon-2" }, "ranges": { "events": [ { "introduced": "0" }, { "fixed": "9.6.19-1.ph2" } ], "type": "ECOSYSTEM" } } ], "id": "PHSA-2020-0281", "modified": "2023-05-26T05:23:28Z", "published": "2020-02-28T00:00:00Z", "references": [ { "type": "ADVISORY", "url": "https://github.com/vmware/photon/wiki/Security-Update-1.0-281" }, { "type": "ADVISORY", "url": "https://github.com/vmware/photon/wiki/Security-Update-2.0-281" } ], "related": [ "CVE-2019-18802", "CVE-2019-17595", "CVE-2019-17594", "CVE-2014-8140", "CVE-2014-8139", "CVE-2014-8141", "CVE-2020-14349", "CVE-2020-7017", "CVE-2020-7019", "CVE-2020-14350", "CVE-2020-7016", "CVE-2020-15166" ] }