Security Update 1.0 209

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2019-0209

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2019-02-20

Affected Release: 1.0

Details

Updates of ['curl', 'sqlite-autoconf', 'elasticsearch', 'glibc', 'binutils', 'kibana'] packages of Photon OS have been released.

Affected Packages

Critical

curl - ['CVE-2019-3822']

kibana - ['CVE-2018-17246', 'CVE-2018-17245']

Important

curl - ['CVE-2019-3823']

sqlite-autoconf - ['CVE-2018-20346']

glibc - ['CVE-2018-19591']

binutils - ['CVE-2018-1000876', 'CVE-2018-19931']

Moderate

elasticsearch - ['CVE-2018-17244']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['glibc'] after updating, a reboot is required for taking effect.

Updated Packages Information

curl-7.59.0-6.ph1.x86_64.rpm | size : 1.1M , sha256 : 02ba6d6cc53063c21f2e7312c57dde9ce10ba7c2112c83e65462b02e4949dd3b , build time : Wed, 20 Feb 2019 13:31:59 UTC

curl-debuginfo-7.59.0-6.ph1.x86_64.rpm | size : 36K , sha256 : e4cded56b120fbf3bebc11f911979f3ef2b24a8f85d6258deec931e24aca892a , build time : Wed, 20 Feb 2019 13:31:59 UTC

curl-7.59.0-6.ph1.x86_64.rpm | size : 1.1M , sha256 : 02ba6d6cc53063c21f2e7312c57dde9ce10ba7c2112c83e65462b02e4949dd3b , build time : Wed, 20 Feb 2019 13:31:59 UTC

curl-debuginfo-7.59.0-6.ph1.x86_64.rpm | size : 36K , sha256 : e4cded56b120fbf3bebc11f911979f3ef2b24a8f85d6258deec931e24aca892a , build time : Wed, 20 Feb 2019 13:31:59 UTC

sqlite-autoconf-debuginfo-3.26.0-1.ph1.x86_64.rpm | size : 5.1M , sha256 : a999b071da0056cfdc313005dd4ee0e38e89429db69a4db4e30f86b8d9a69846 , build time : Wed, 20 Feb 2019 13:29:26 UTC

sqlite-autoconf-3.26.0-1.ph1.x86_64.rpm | size : 1.5M , sha256 : cf6f5094a25b6dcd268ea3c3fcd64b67ad4bdc5973e96b68e7712eea023015da , build time : Wed, 20 Feb 2019 13:29:26 UTC

elasticsearch-6.4.3-1.ph1.x86_64.rpm | size : 33M , sha256 : 7acab63f0643b730bf58ef53ca3c3453c337365abefe7ba927cbf1c419032f13 , build time : Wed, 20 Feb 2019 13:47:08 UTC

glibc-lang-2.22-24.ph1.x86_64.rpm | size : 1.4M , sha256 : 6f483de001c539044ccaf5d8e5d2785ff366116abd688503dadd05bf66f3f4b6 , build time : Wed, 20 Feb 2019 13:22:47 UTC

glibc-devel-2.22-24.ph1.x86_64.rpm | size : 12M , sha256 : 7279cb12478513c0d129e2f9ff1397bcc01b4f703b83c57436b8194446bd6c57 , build time : Wed, 20 Feb 2019 13:22:47 UTC

glibc-2.22-24.ph1.x86_64.rpm | size : 19M , sha256 : 98b174c99b724211aa39a5959df5f00e4f85b942dfd516cb9023c4f8ade5d6a9 , build time : Wed, 20 Feb 2019 13:22:47 UTC

binutils-devel-2.31-3.ph1.x86_64.rpm | size : 756K , sha256 : ae4cc93a50e56598a5867bcfc54fcf81968f2d1c431c3a74a11478454822deb5 , build time : Wed, 20 Feb 2019 13:26:15 UTC

binutils-debuginfo-2.31-3.ph1.x86_64.rpm | size : 44M , sha256 : 0fecb5cdb389de7d21b6a989dff5a527b80aaf1fbbc591422c06f812798308bd , build time : Wed, 20 Feb 2019 13:26:15 UTC

binutils-2.31-3.ph1.x86_64.rpm | size : 8.2M , sha256 : 55edf30ade8d37db36640fa7fa23e215ece29040918af196fbb643f79f971c9a , build time : Wed, 20 Feb 2019 13:26:15 UTC

kibana-6.4.3-1.ph1.x86_64.rpm | size : 59M , sha256 : 43f7a5b1be41103432c3841d3b164e41d45fb51264a503a37f956c058ac8167d , build time : Wed, 20 Feb 2019 15:20:01 UTC