Security Update 1.0 309

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2020-0309

Type : Security

Severity : ['Important', 'Moderate']

Issue date : 2020-07-25

Affected Release: 1.0

Details

Updates of ['envoy', 'python3', 'linux', 'apache-tomcat', 'linux-esx', 'python2', 'mysql', 'bindutils'] packages of Photon OS have been released.

Affected Packages

Important

envoy - ['CVE-2020-12605', 'CVE-2020-12604', 'CVE-2020-12603', 'CVE-2020-8663']

python3 - ['CVE-2019-20907']

linux - ['CVE-2020-14305']

apache-tomcat - ['CVE-2020-13934', 'CVE-2020-13935']

linux-esx - ['CVE-2020-14305']

python2 - ['CVE-2019-20907']

Moderate

python3 - ['CVE-2020-14422']

linux - ['CVE-2020-15393', 'CVE-2020-15436', 'CVE-2020-12888']

linux-esx - ['CVE-2020-15393', 'CVE-2020-15436', 'CVE-2020-12888']

mysql - ['CVE-2020-14559', 'CVE-2020-14539', 'CVE-2020-14550', 'CVE-2020-14553', 'CVE-2020-14567', 'CVE-2020-14576', 'CVE-2020-14547', 'CVE-2020-14540']

bindutils - ['CVE-2020-8619', 'CVE-2020-8618']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux', 'linux-esx'] after updating, a reboot is required for taking effect.

Updated Packages Information

envoy-1.15.0-1.ph1.x86_64.rpm | size : 26M , sha256 : 45cae4ec082b255100740726e0b8aa19328fcaa4a0ddd1e4563205d7fea8f8b3 , build time : Fri, 24 Jul 2020 04:45:54 UTC

python3-3.5.6-16.ph1.x86_64.rpm | size : 1.1M , sha256 : 5e19f789f313f31ae0732aeed243aa6a3119f4e602073330fc7d2507b94d9364 , build time : Fri, 24 Jul 2020 03:28:39 UTC

python3-libs-3.5.6-16.ph1.x86_64.rpm | size : 8.8M , sha256 : a7fb61fdb0dcb8d25e4dc2d04a8e73a36d0c0c6339152884838c3c09ab341644 , build time : Fri, 24 Jul 2020 03:28:39 UTC

python3-tools-3.5.6-16.ph1.x86_64.rpm | size : 168K , sha256 : f030fb79041db0a7c19b227e28a355e52d35c69a47b8faa8cd2635bd2cae1fa9 , build time : Fri, 24 Jul 2020 03:28:39 UTC

python3-devel-3.5.6-16.ph1.x86_64.rpm | size : 156K , sha256 : 0a1a21398b31c596b2068c295fa04e4ac499325591b3879d4963974013950df3 , build time : Fri, 24 Jul 2020 03:28:39 UTC

python3-3.5.6-16.ph1.x86_64.rpm | size : 1.1M , sha256 : 5e19f789f313f31ae0732aeed243aa6a3119f4e602073330fc7d2507b94d9364 , build time : Fri, 24 Jul 2020 03:28:39 UTC

python3-libs-3.5.6-16.ph1.x86_64.rpm | size : 8.8M , sha256 : a7fb61fdb0dcb8d25e4dc2d04a8e73a36d0c0c6339152884838c3c09ab341644 , build time : Fri, 24 Jul 2020 03:28:39 UTC

python3-tools-3.5.6-16.ph1.x86_64.rpm | size : 168K , sha256 : f030fb79041db0a7c19b227e28a355e52d35c69a47b8faa8cd2635bd2cae1fa9 , build time : Fri, 24 Jul 2020 03:28:39 UTC

python3-devel-3.5.6-16.ph1.x86_64.rpm | size : 156K , sha256 : 0a1a21398b31c596b2068c295fa04e4ac499325591b3879d4963974013950df3 , build time : Fri, 24 Jul 2020 03:28:39 UTC

linux-tools-4.4.230-1.ph1.x86_64.rpm | size : 832K , sha256 : 301e0c7acfb71b838b647364240227133d071f15a4b9c961813acebc31a73647 , build time : Fri, 24 Jul 2020 03:59:15 UTC

linux-docs-4.4.230-1.ph1.x86_64.rpm | size : 6.7M , sha256 : 74c057f651a8a503a318e380f68999e3fb949e5424620d41ffe297b3849d4013 , build time : Fri, 24 Jul 2020 03:59:15 UTC

linux-esx-docs-4.4.230-1.ph1.x86_64.rpm | size : 6.7M , sha256 : 20ceb859ba3f13ac144e02904eb231d7709392b84335655899bca20b64367148 , build time : Fri, 24 Jul 2020 03:55:23 UTC

linux-esx-devel-4.4.230-1.ph1.x86_64.rpm | size : 9.8M , sha256 : 7e1bad7393d2d8fcfb26b3157f129df61de688c00cb4534148d48642de379d37 , build time : Fri, 24 Jul 2020 03:55:23 UTC

linux-4.4.230-1.ph1.x86_64.rpm | size : 19M , sha256 : 7da3ebf8175d8757267a3f86b385ca1ede00e560a5dc5ff5b25a8690beee2f01 , build time : Fri, 24 Jul 2020 05:20:55 UTC

linux-api-headers-4.4.230-1.ph1.noarch.rpm | size : 1.1M , sha256 : af9e9854e07d4bf4a3820160b2b8a0d869ad549178847c4a86a272ff36b1f988 , build time : Fri, 24 Jul 2020 03:03:41 UTC

linux-sound-4.4.230-1.ph1.x86_64.rpm | size : 264K , sha256 : 0f6d1cfb717bd88b4ffe56347e8c0349a1069a71e42d14fc52c2ac375485dbdd , build time : Fri, 24 Jul 2020 03:59:15 UTC

linux-dev-4.4.230-1.ph1.x86_64.rpm | size : 10M , sha256 : 31ffee91624430ba9848f8173f3305a2641c3e23f1edd5833addfaf1fe815504 , build time : Fri, 24 Jul 2020 03:59:15 UTC

linux-drivers-gpu-4.4.230-1.ph1.x86_64.rpm | size : 1.5M , sha256 : 53d7a771c21fc0539c25e2e48dc342874edc96ba5074257726e61d83b6e9a069 , build time : Fri, 24 Jul 2020 03:59:15 UTC

linux-esx-4.4.230-1.ph1.x86_64.rpm | size : 7.7M , sha256 : 6fb9f4dcfdc8a80e7fdf8b6fb5ff39879c756a701a2bf2baf9ceec4dccd330f8 , build time : Fri, 24 Jul 2020 05:21:33 UTC

linux-oprofile-4.4.230-1.ph1.x86_64.rpm | size : 52K , sha256 : 398ffbc1c4203c5970e0b04b711170621e9bae4e6d1c77dfb37226ddfdf006e0 , build time : Fri, 24 Jul 2020 03:59:15 UTC