Advisory Id : PHSA-2020-3.0-0141

Type : Security

Severity : ['Moderate', 'Low']

Issue date : 2020-09-17

Affected Release: 3.0

Updates of ['commons-httpclient', 'openssl'] packages of Photon OS have been released.

commons-httpclient - ['CVE-2014-3577', 'CVE-2012-5783', 'CVE-2015-5262']

openssl - ['CVE-2020-1968']

Update the affected packages (tdnf update package)

commons-httpclient-3.1-1.ph3.noarch.rpm | size : 432K , sha256 : 545cd93f8a6ccc5dec32be4d6ef9d860ed0005c0e1e0ff9c79cb2055c9a0ccb1 , build time : Wed, 16 Sep 2020 17:27:28 UTC

openssl-1.0.2w-1.ph3.x86_64.rpm | size : 2.1M , sha256 : 4ddbb0e307bed8ec5532489506be7bf3542ed339e040b1688569c3e03a585868 , build time : Wed, 16 Sep 2020 17:17:03 UTC

openssl-c_rehash-1.0.2w-1.ph3.x86_64.rpm | size : 16K , sha256 : 24aab2426e19db104b56dd45db916a8ca8ff7ff1d970e625a9e6daee808eb89f , build time : Wed, 16 Sep 2020 17:17:03 UTC

openssl-devel-1.0.2w-1.ph3.x86_64.rpm | size : 3.2M , sha256 : e3dddf6318681607d52f6630b1f888f33895da7a2c50bcd2c1fc5834f43de4d6 , build time : Wed, 16 Sep 2020 17:17:03 UTC

openssl-perl-1.0.2w-1.ph3.x86_64.rpm | size : 16K , sha256 : 326d968e7964cb3873acd2a5a6d4c15b1a0d92c64d6fb820c64c57a1b73bafb3 , build time : Wed, 16 Sep 2020 17:17:03 UTC