Instructions to address bindutils vulnerability

Products

• VMware Integrated OpenStack

Issue/Introduction

A security scan against the management plane vm's return one or more of these CVE's:

• CVE-2020-8616
• CVE-2020-8617

Environment

7.3

Cause

Photon has issued a security Advisory, PHSA-2020-3.0-0101

 

Resolution

The issue with bindutils is addressed with bindutils-9.16.3-1.

1. Determine version of package that is installed
   rpm -qa | grep bindutils

   
   
2. If the package version returned is less than bindutils-9.16.3-1:
tdnf update bindutils