Security Update 5.0 302

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2024-5.0-0302

Type : Security

Severity : ['Critical', 'Moderate']

Issue date : 2024-06-24

Affected Release: 5.0

Details

Updates of ['nginx', 'go'] packages of Photon OS have been released.

Affected Packages

Critical

go - ['CVE-2024-24790']

Moderate

nginx - ['CVE-2024-35200', 'CVE-2024-34161', 'CVE-2024-32760', 'CVE-2024-31079']

go - ['CVE-2024-24789']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

nginx-1.27.0-1.ph5.x86_64.rpm | size : 816K , sha256 : a327df4b206f028262fa2afb7c67c3d474f05a04329bbb2a184c5276382c2c04 , build time : Mon, 24 Jun 2024 07:38:19 UTC

nginx-ingress-2.4.2-10.ph5.x86_64.rpm | size : 9.9M , sha256 : 0a68f3395c00909dd364441109c1586efc3b4e4e87970f61d7fd9fcb763dada1 , build time : Mon, 24 Jun 2024 08:05:16 UTC

go-1.21.11-1.ph5.x86_64.rpm | size : 44M , sha256 : 2e4d9d72a8678cf0c79408201eae2762cfd8314850ac25528372c308eeed152f , build time : Mon, 24 Jun 2024 07:38:17 UTC

go-md2man-2.0.2-10.ph5.x86_64.rpm | size : 740K , sha256 : a0a92b97728119d3421b2a6621231d2de09e754194e2adf5c84c2072a9127e88 , build time : Mon, 24 Jun 2024 07:41:57 UTC