photon-os-advisories/advisories/PHSA-2020-0288.json

{
    "affected": [
        {
            "package": {
                "ecosystem": "photon:1.0",
                "name": "libgcrypt",
                "purl": "pkg:rpm/vmware/libgcrypt?distro=photon-1"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "1.7.6-6.ph1"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:1.0",
                "name": "yarn",
                "purl": "pkg:rpm/vmware/yarn?distro=photon-1"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "1.10.1-6.ph1"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:1.0",
                "name": "python2",
                "purl": "pkg:rpm/vmware/python2?distro=photon-1"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "2.7.15-16.ph1"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:1.0",
                "name": "openvswitch",
                "purl": "pkg:rpm/vmware/openvswitch?distro=photon-1"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "2.6.1-6.ph1"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:1.0",
                "name": "kubernetes",
                "purl": "pkg:rpm/vmware/kubernetes?distro=photon-1"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "1.13.12-2.ph1"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:1.0",
                "name": "gnupg",
                "purl": "pkg:rpm/vmware/gnupg?distro=photon-1"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "2.2.18-1.ph1"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:2.0",
                "name": "linux-aws",
                "purl": "pkg:rpm/vmware/linux-aws?distro=photon-2"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "4.9.237-2.ph2"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:2.0",
                "name": "linux-secure",
                "purl": "pkg:rpm/vmware/linux-secure?distro=photon-2"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "4.9.237-1.ph2"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:2.0",
                "name": "icu",
                "purl": "pkg:rpm/vmware/icu?distro=photon-2"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "67.1-1.ph2"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:2.0",
                "name": "linux-esx",
                "purl": "pkg:rpm/vmware/linux-esx?distro=photon-2"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "4.9.237-1.ph2"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:2.0",
                "name": "linux",
                "purl": "pkg:rpm/vmware/linux?distro=photon-2"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "4.9.237-2.ph2"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:2.0",
                "name": "nodejs",
                "purl": "pkg:rpm/vmware/nodejs?distro=photon-2"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "10.22.1-1.ph2"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "photon:2.0",
                "name": "gnutls",
                "purl": "pkg:rpm/vmware/gnutls?distro=photon-2"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "3.6.15-1.ph2"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        }
    ],
    "id": "PHSA-2020-0288",
    "modified": "2023-03-16T05:25:30Z",
    "published": "2020-04-11T00:00:00Z",
    "references": [
        {
            "type": "ADVISORY",
            "url": "https://github.com/vmware/photon/wiki/Security-Update-1.0-288"
        },
        {
            "type": "ADVISORY",
            "url": "https://github.com/vmware/photon/wiki/Security-Update-2.0-288"
        }
    ],
    "related": null
}