Security Update 5.0 126

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-5.0-0126

Type : Security

Severity : ['Critical', 'Important']

Issue date : 2023-10-26

Affected Release: 5.0

Details

Updates of ['nghttp2', 'zlib'] packages of Photon OS have been released.

Affected Packages

Critical

zlib - ['CVE-2023-45853']

Important

nghttp2 - ['CVE-2023-35945', 'CVE-2023-44487']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

nghttp2-1.57.0-1.ph5.x86_64.rpm | size : 136K , sha256 : ac37211712b915eb1f6e44a1b6ff2d0c1bb2262eb0ddd7f506e6e1c1a77c00d0 , build time : Thu, 26 Oct 2023 15:02:06 UTC

nghttp2-devel-1.57.0-1.ph5.x86_64.rpm | size : 44K , sha256 : 8e55afa7dddd9307d9645058198acdf780d7cf83b3f7d901ce9539d14b0f80b5 , build time : Thu, 26 Oct 2023 15:02:06 UTC

zlib-1.2.13-2.ph5.x86_64.rpm | size : 68K , sha256 : 785a8828c02001289f3c8f244718cbdd32f9dd13e1a64eaa6d22f279ed1f7046 , build time : Thu, 26 Oct 2023 15:01:25 UTC

zlib-devel-1.2.13-2.ph5.x86_64.rpm | size : 96K , sha256 : ac741bb3cb8aba224c025c1a633b4fb74e3720f879925305a9a301fa4f56a54e , build time : Thu, 26 Oct 2023 15:01:25 UTC