Lucene search
PhotonPHSA-2022-3.0-0406HistoryJun 17, 2022 - 12:00 a.m.
Important Photon OS Security Update - PHSA-2022-3.0-0406
2022-06-1700:00:00
github.com
21
photon os
security update
curl
python-lxml
vim
phsa-2022-3.0-0406
unix
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
Low
EPSS
0.004
Percentile
74.5%
Updates of [‘curl’, ‘python-lxml’, ‘vim’] packages of Photon OS have been released.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Photon | 3.0 | x86_64 | vim | < 8.2.5037-1.ph3 | vim-8.2.5037-1.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | curl-devel | < 7.83.1-1.ph3 | curl-devel-7.83.1-1.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | python-lxml | < 4.2.5-1.ph3 | python-lxml-4.2.5-1.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | curl | < 7.83.1-1.ph3 | curl-7.83.1-1.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | curl-libs | < 7.83.1-1.ph3 | curl-libs-7.83.1-1.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | vim-extra | < 8.2.5037-1.ph3 | vim-extra-8.2.5037-1.ph3.x86_64.rpm |
Related
photon
photon
Critical Photon OS Security Update - PHSA-2022-0406
2022-06-17 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0205
2022-06-27 00:00:00
Important Photon OS Security Update - PHSA-2022-0205
2022-06-27 00:00:00
nessus
nessus
Photon OS 4.0: Curl PHSA-2022-4.0-0205
2024-07-23 00:00:00
Photon OS 3.0: Curl PHSA-2022-3.0-0406
2024-07-24 00:00:00
Fedora 36 : curl (2022-d15a736748)
2022-05-12 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 36 Update: curl-7.82.0-5.fc36
2022-05-12 20:26:36
[SECURITY] Fedora 35 Update: curl-7.79.1-4.fc35
2022-05-18 01:11:50
[SECURITY] Fedora 34 Update: curl-7.76.1-16.fc34
2022-05-24 01:41:08
redos
redos
ROS-20220524-03
2022-05-24 00:00:00
ROS-20220516-09
2022-05-16 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2022-131-01)
2022-05-12 00:00:00
Fedora: Security Advisory for curl (FEDORA-2022-d15a736748)
2022-05-13 00:00:00
Ubuntu: Security Advisory (USN-5412-1)
2022-05-12 00:00:00
freebsd
freebsd
curl -- Multiple vulnerabilities
2022-05-11 00:00:00
cURL -- Multiple vulnerabilities
2022-04-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package curl version 7.83.1-alt1
2022-05-19 00:00:00
slackware
slackware
[slackware-security] curl
2022-05-11 19:04:46
[slackware-security] curl
2022-04-27 21:48:34
osv
osv
curl-7.83.1-1.1 on GA media
2024-06-15 00:00:00
curl vulnerabilities
2022-05-11 13:14:58
Moderate: curl security update
2022-06-28 10:52:02
ubuntu
ubuntu
curl vulnerabilities
2022-05-11 00:00:00
curl vulnerabilities
2022-04-28 00:00:00
lxml vulnerability
2018-12-10 00:00:00
cloudfoundry
cloudfoundry
USN-5412-1: curl vulnerabilities | Cloud Foundry
2022-12-07 00:00:00
USN-5397-1: curl vulnerabilities | Cloud Foundry
2022-05-23 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2022-05-15 13:06:40
Updated python-lxml packages fix security vulnerability
2019-01-01 01:42:09
Updated curl packages fix security vulnerability
2022-05-02 22:44:52
suse
suse
Security update for curl (important)
2022-05-27 00:00:00
Security update for curl (moderate)
2022-05-13 00:00:00
Security update for python-lxml (important)
2022-03-10 00:00:00
amazon
amazon
Medium: curl
2022-05-04 01:01:00
Medium: curl
2022-12-01 17:33:00
Medium: python-lxml
2024-08-01 03:01:00
redhat
redhat
(RHSA-2022:5313) Moderate: curl security update
2022-06-28 10:52:02
(RHSA-2022:5245) Moderate: curl security update
2022-06-28 08:27:15
(RHSA-2021:4158) Moderate: python-lxml security update
2021-11-09 08:26:20
veracode
veracode
Cross-Site Scripting (XSS)
2018-09-19 01:17:20
Information Disclosure
2022-05-13 11:58:33
Cross-site Scripting (XSS)
2022-05-14 23:45:07
rocky
rocky
curl security update
2022-06-28 10:52:02
python-lxml security update
2021-11-09 08:26:20
oraclelinux
oraclelinux
curl security update
2022-06-30 00:00:00
curl security update
2022-06-30 00:00:00
cbl_mariner
cbl_mariner
CVE-2018-19787 affecting package python-lxml for versions less than 4.8.0-1
2022-04-26 19:57:36
CVE-2018-19787 affecting package python-lxml 4.2.4-7
2021-08-11 06:39:25
CVE-2022-30115 affecting package curl for versions less than 7.83.1-1
2022-07-01 21:02:21
cvelist
cvelist
alpinelinux
alpinelinux
hackerone
hackerone
Internet Bug Bounty: CVE-2022-30115: HSTS bypass via trailing dot
2022-05-11 07:10:29
curl: CVE-2022-27780: percent-encoded path separator in URL host
2022-04-28 17:26:19
almalinux
almalinux
Moderate: curl security update
2022-06-30 00:00:00
Moderate: python-lxml security update
2021-11-09 08:26:20
debiancve
debiancve
CVE-2022-30115
2022-06-02 14:15:51
CVE-2021-28957
2021-03-21 05:15:13
prion
prion
Design/Logic Flaw
2022-06-02 14:15:00
Cross site scripting
2021-03-21 05:15:00
redhatcve
redhatcve
CVE-2022-30115
2022-05-11 07:37:16
CVE-2021-28957
2021-03-22 10:58:48
ubuntucve
ubuntucve
CVE-2022-27780
2022-05-11 00:00:00
CVE-2021-28957
2021-03-21 00:00:00
nvd
nvd
CVE-2022-27780
2022-06-02 14:15:44
gentoo
gentoo
curl: Multiple Vulnerabilities
2022-12-19 00:00:00
github
github
lxml vulnerable to Cross-Site Scripting
2021-03-22 16:53:53
debian
debian
[SECURITY] [DSA 4880-1] lxml security update
2021-03-29 16:20:53
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
Low
EPSS
0.004
Percentile
74.5%
Related for PHSA-2022-3.0-0406