Critical Photon OS Security Update - PHSA-2017-0078

2017-10-1900:00:00

github.com

124

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.975 High

EPSS

Percentile

100.0%

JSON

Updates of [‘dosfstools’, ‘git’, ‘libgcrypt’, ‘mercurial’, ‘linux’, ‘mysql’, ‘ncurses’, ‘gnutls’, ‘dnsmasq’, ‘apache- tomcat’, ‘binutils’, ‘c-ares’, ‘linux-esx’, ‘nginx’, ‘mesos’, ‘libtasn1’] packages of Photon OS have been released.

OSVersionArchitecturePackageVersionFilename
Photon1.0x86_64linux-esx-docs< 4.4.92-2.ph1linux-esx-docs-4.4.92-2.ph1.x86_64.rpm
Photon1.0x86_64libgcrypt-devel< 1.7.6-2.ph1libgcrypt-devel-1.7.6-2.ph1.x86_64.rpm
Photon1.0noarchlinux-api-headers< 4.4.92-1.ph1linux-api-headers-4.4.92-1.ph1.noarch.rpm
Photon1.0x86_64linux-tools< 4.4.92-1.ph1linux-tools-4.4.92-1.ph1.x86_64.rpm
Photon1.0x86_64mysql-devel< 5.7.20-1.ph1mysql-devel-5.7.20-1.ph1.x86_64.rpm
Photon1.0x86_64nginx< 1.11.13-4.ph1nginx-1.11.13-4.ph1.x86_64.rpm
Photon1.0x86_64mercurial-debuginfo< 4.3.3-1.ph1mercurial-debuginfo-4.3.3-1.ph1.x86_64.rpm
Photon1.0x86_64libtasn1< 4.12-1.ph1libtasn1-4.12-1.ph1.x86_64.rpm
Photon1.0x86_64linux-dev< 4.4.92-1.ph1linux-dev-4.4.92-1.ph1.x86_64.rpm
Photon1.0x86_64binutils-devel< 2.29.1-1.ph1binutils-devel-2.29.1-1.ph1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Photon	1.0	x86_64	linux-esx-docs	< 4.4.92-2.ph1	linux-esx-docs-4.4.92-2.ph1.x86_64.rpm
Photon	1.0	x86_64	libgcrypt-devel	< 1.7.6-2.ph1	libgcrypt-devel-1.7.6-2.ph1.x86_64.rpm
Photon	1.0	noarch	linux-api-headers	< 4.4.92-1.ph1	linux-api-headers-4.4.92-1.ph1.noarch.rpm
Photon	1.0	x86_64	linux-tools	< 4.4.92-1.ph1	linux-tools-4.4.92-1.ph1.x86_64.rpm
Photon	1.0	x86_64	mysql-devel	< 5.7.20-1.ph1	mysql-devel-5.7.20-1.ph1.x86_64.rpm
Photon	1.0	x86_64	nginx	< 1.11.13-4.ph1	nginx-1.11.13-4.ph1.x86_64.rpm
Photon	1.0	x86_64	mercurial-debuginfo	< 4.3.3-1.ph1	mercurial-debuginfo-4.3.3-1.ph1.x86_64.rpm
Photon	1.0	x86_64	libtasn1	< 4.12-1.ph1	libtasn1-4.12-1.ph1.x86_64.rpm
Photon	1.0	x86_64	linux-dev	< 4.4.92-1.ph1	linux-dev-4.4.92-1.ph1.x86_64.rpm
Photon	1.0	x86_64	binutils-devel	< 2.29.1-1.ph1	binutils-devel-2.29.1-1.ph1.x86_64.rpm