Security Update 1.0 338

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2020-0338

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2020-11-17

Affected Release: 1.0

Details

Updates of ['python3', 'ruby', 'linux', 'apache-tomcat', 'linux-esx', 'mysql', 'pam_tacplus'] packages of Photon OS have been released.

Affected Packages

Critical

python3 - ['CVE-2020-27619']

pam_tacplus - ['CVE-2020-27743']

Important

ruby - ['CVE-2020-25613']

linux - ['CVE-2020-25668', 'CVE-2020-25705', 'CVE-2020-12351', 'CVE-2020-25643', 'CVE-2020-25645']

linux-esx - ['CVE-2020-25668', 'CVE-2020-25705', 'CVE-2020-12351', 'CVE-2020-25643', 'CVE-2020-25645']

Moderate

linux - ['CVE-2020-8694', 'CVE-2020-12352', 'CVE-2020-28974', 'CVE-2020-28915', 'CVE-2020-25656']

apache-tomcat - ['CVE-2020-13943']

linux-esx - ['CVE-2020-8694', 'CVE-2020-28974', 'CVE-2020-28915', 'CVE-2020-25656']

mysql - ['CVE-2020-14672', 'CVE-2020-14776', 'CVE-2020-14869', 'CVE-2020-14812', 'CVE-2020-14765', 'CVE-2020-14793', 'CVE-2020-14790', 'CVE-2020-14827', 'CVE-2020-14760', 'CVE-2020-14769', 'CVE-2020-14775', 'CVE-2020-14867', 'CVE-2020-14789']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux', 'linux-esx'] after updating, a reboot is required for taking effect.

Updated Packages Information

python3-3.5.6-18.ph1.x86_64.rpm | size : 1.1M , sha256 : ecd05f778c61a0b25e6266605afd89820f62524685f53909df9289afe89d8080 , build time : Sat, 14 Nov 2020 02:59:21 UTC

python3-tools-3.5.6-18.ph1.x86_64.rpm | size : 168K , sha256 : 46bd3e0b0262215cb5e3b3d878506f4db05d383d9c41a4c5b97c3b6aa287d5f2 , build time : Sat, 14 Nov 2020 02:59:21 UTC

python3-libs-3.5.6-18.ph1.x86_64.rpm | size : 8.8M , sha256 : 968b45d197d43998466c411d04350133fe736c8914eedb1e11d1ba03711bbca3 , build time : Sat, 14 Nov 2020 02:59:21 UTC

python3-devel-3.5.6-18.ph1.x86_64.rpm | size : 156K , sha256 : bbf2e38c41b8f27cd3ee3298844f695ae5ee946dd7cd7351c133b7c2d01895f6 , build time : Sat, 14 Nov 2020 02:59:21 UTC

ruby-2.5.8-2.ph1.x86_64.rpm | size : 9.2M , sha256 : 4ee039475d8e7e922fac25b0126562e6854b36b0579f2936f7bef30483b07068 , build time : Sat, 14 Nov 2020 03:22:28 UTC

linux-sound-4.4.243-1.ph1.x86_64.rpm | size : 268K , sha256 : 4d148984767097ff44f678e1945e84490a0d1c072d9f1e61fb6c38453405af67 , build time : Sat, 14 Nov 2020 04:04:54 UTC

linux-drivers-gpu-4.4.243-1.ph1.x86_64.rpm | size : 1.5M , sha256 : ef948fa45d5a7462a4e1c76720c7b562222976dbe9bee69ee2eff61a772ad044 , build time : Sat, 14 Nov 2020 04:04:54 UTC

linux-esx-4.4.243-1.ph1.x86_64.rpm | size : 7.7M , sha256 : 32ec69ed9587c1c448c710c92d75990021242584709654293f2b715b6fbb58db , build time : Sat, 14 Nov 2020 07:37:04 UTC

linux-esx-docs-4.4.243-1.ph1.x86_64.rpm | size : 6.7M , sha256 : 5f375c9c5b6a4f09956bffa7f451106d85828606c748e911538032fccd4985a4 , build time : Sat, 14 Nov 2020 03:28:15 UTC

linux-4.4.243-1.ph1.x86_64.rpm | size : 19M , sha256 : b8e290441c8b24276c33f8bbda60874e1749c3205c70ef63e04905416cc28e9a , build time : Sat, 14 Nov 2020 07:36:38 UTC

linux-oprofile-4.4.243-1.ph1.x86_64.rpm | size : 52K , sha256 : dc413edfb0f88afc219fa18abeb5d8f14510a3746f66581d1720ad6ea29c7045 , build time : Sat, 14 Nov 2020 04:04:54 UTC

linux-esx-devel-4.4.243-1.ph1.x86_64.rpm | size : 9.8M , sha256 : 504d503a82b0236a81f171ec1c4e999032179d92d5c7dc7e7e1e97233786e197 , build time : Sat, 14 Nov 2020 03:28:15 UTC

linux-tools-4.4.243-1.ph1.x86_64.rpm | size : 836K , sha256 : bcc51a3b90c3c7e98c5bf75935caab6c7137b3b32b30b078862ff052ec39d7cd , build time : Sat, 14 Nov 2020 04:04:54 UTC

linux-dev-4.4.243-1.ph1.x86_64.rpm | size : 10M , sha256 : 60eeeea193bed1ee83a1a8b9c236a8b95b885efd79306366dac552204094f7b1 , build time : Sat, 14 Nov 2020 04:04:54 UTC

linux-docs-4.4.243-1.ph1.x86_64.rpm | size : 6.7M , sha256 : 4452865cb6634c5e168b7ddce0a3a6de0178fc0246cb4a755a32c9eef00cbe77 , build time : Sat, 14 Nov 2020 04:04:54 UTC

linux-api-headers-4.4.243-1.ph1.noarch.rpm | size : 1.1M , sha256 : 067446eb1b3f52b33fef75aad7ea75341fbca5e8bf57c2999620d162a680b7a7 , build time : Sat, 14 Nov 2020 02:53:33 UTC