Security Update 2.0 171

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2019-0171

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2019-08-02

Affected Release: 2.0

Details

Updates of ['glib', 'expat', 'oniguruma', 'libpng', 'python3', 'zeromq', 'python2', 'apache-tomcat', 'curl', 'systemd', 'unzip', 'gnupg', 'libxslt', 'libssh2'] packages of Photon OS have been released.

Affected Packages

Critical

oniguruma - ['CVE-2019-13224']

libpng - ['CVE-2017-12652']

zeromq - ['CVE-2019-13132']

Important

glib - ['CVE-2019-13012']

expat - ['CVE-2018-20843']

apache-tomcat - ['CVE-2019-10072']

curl - ['CVE-2018-16890']

gnupg - ['CVE-2019-13050']

libxslt - ['CVE-2019-13118', 'CVE-2019-13117']

libssh2 - ['CVE-2019-13115']

Moderate

python3 - ['CVE-2018-20852']

python2 - ['CVE-2018-20852']

systemd - ['CVE-2019-6454']

Low

unzip - ['CVE-2019-13232']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['systemd'] after updating, a reboot is required for taking effect.

Updated Packages Information

glib-2.58.3-1.ph2.x86_64.rpm | size : 1.3M , sha256 : ee0d0f33c4e736b1ce53ccad9f7d1e3e7e93607c940988bf0e777b2f34c7e7a0 , build time : Thu, 01 Aug 2019 03:26:53 UTC

glib-debuginfo-2.58.3-1.ph2.x86_64.rpm | size : 6.3M , sha256 : 65aecd78f09ac366ef2caf62dd0332ee3d972d279439109a9a3c92bce42effb6 , build time : Thu, 01 Aug 2019 03:26:53 UTC

glib-schemas-2.58.3-1.ph2.x86_64.rpm | size : 40K , sha256 : cf8dffb9d08a90c0a803aadfeb91c3f372939d29e8384cdd335d408bd160671b , build time : Thu, 01 Aug 2019 03:26:53 UTC

glib-devel-2.58.3-1.ph2.x86_64.rpm | size : 3.1M , sha256 : f837fc40f74da96789213156fdde89214d7bb60ce67d05aa6ea8c78612f9e370 , build time : Thu, 01 Aug 2019 03:26:53 UTC

expat-libs-2.2.4-2.ph2.x86_64.rpm | size : 76K , sha256 : 7747f6fceb24157d714f785de68425d1d7ffd78e561f344978745981691a9cd1 , build time : Thu, 01 Aug 2019 03:15:26 UTC

expat-devel-2.2.4-2.ph2.x86_64.rpm | size : 24K , sha256 : f7232cfcace3ca428d4f114b257f772c99641cffd566b296dd8682ed106d6284 , build time : Thu, 01 Aug 2019 03:15:26 UTC

expat-2.2.4-2.ph2.x86_64.rpm | size : 36K , sha256 : 9c61a769da92078637df9fda901f9ba5d65c16fd8906ba93f55ab79214d8dd3a , build time : Thu, 01 Aug 2019 03:15:26 UTC

expat-debuginfo-2.2.4-2.ph2.x86_64.rpm | size : 240K , sha256 : de7b78d0053dc9f28b02f4a7e050a8445a2857f22406dd486d7b1583890ea77c , build time : Thu, 01 Aug 2019 03:15:26 UTC

oniguruma-6.5.0-2.ph2.x86_64.rpm | size : 196K , sha256 : 62a7eb25a21d8d98c89d4f6d6905a50dadfd6626e67d8812b776dec23958516f , build time : Thu, 01 Aug 2019 03:24:34 UTC

oniguruma-debuginfo-6.5.0-2.ph2.x86_64.rpm | size : 480K , sha256 : efc1e52fb6499e538f49137e2698f839c0c5c5a48f45204be74fd2e3b0ab8db7 , build time : Thu, 01 Aug 2019 03:24:34 UTC

libpng-devel-1.6.35-1.ph2.x86_64.rpm | size : 56K , sha256 : 5f809342bbea77e4d562151ec58f0b502d3c2442693e4ad91ca085e3360c3195 , build time : Thu, 01 Aug 2019 03:24:26 UTC

libpng-debuginfo-1.6.35-1.ph2.x86_64.rpm | size : 608K , sha256 : e27f4eff1af14141c470dd13ad420ef50c098c2434588418bba0da909e002aee , build time : Thu, 01 Aug 2019 03:24:26 UTC

libpng-1.6.35-1.ph2.x86_64.rpm | size : 228K , sha256 : 6ee08c95e214f287d4d0722e1cb83760b5eb32ee020ce22fc4f3a99218743939 , build time : Thu, 01 Aug 2019 03:24:26 UTC

python3-test-3.6.5-8.ph2.x86_64.rpm | size : 3.4M , sha256 : edca29b9c42656830438c797bae284c7213ecfc9056e799adc32b5738cee8104 , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-curses-3.6.5-8.ph2.x86_64.rpm | size : 56K , sha256 : 90c373b0dcbe38719239f31a00455f32f4f72105926967a6834894c06f8e590a , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-libs-3.6.5-8.ph2.x86_64.rpm | size : 7.5M , sha256 : eb78f4dacb68b4168bc1cf8bf98cee85ae7631ecea8a557a2c62fadb4690c716 , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-tools-3.6.5-8.ph2.x86_64.rpm | size : 168K , sha256 : 3e5d5faaad46695a7802d10c32ae87aa44ebdb6dc45972271f2b883e058e7286 , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-xml-3.6.5-8.ph2.x86_64.rpm | size : 96K , sha256 : b5f592b083f1b1135316a0841c66a9bb9328a6cc305c6e5326f844de70916ffb , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-setuptools-3.6.5-8.ph2.noarch.rpm | size : 548K , sha256 : f2da6cd2b3608c5d447735641c0e9def0375bdb1072ff9bbbc9777978178cdf0 , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-debuginfo-3.6.5-8.ph2.x86_64.rpm | size : 8.2M , sha256 : 933ef0abdaa39224fc808145265d8912a1bc003bbdcdc23fc8ffadf3bda408f7 , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-devel-3.6.5-8.ph2.x86_64.rpm | size : 176K , sha256 : c08ce7d249bb0b8a95bcd9fd296ce8f672ded1c1aa02dac2ac5e790d9774bcef , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-3.6.5-8.ph2.x86_64.rpm | size : 1.1M , sha256 : 385ef38074cdabd50d194f63e321a3a5a81cea165206e7316b1c646eb4f35a3d , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-pip-3.6.5-8.ph2.noarch.rpm | size : 1.3M , sha256 : 36c2bf0742493c62ac0901db4253a94ae13058b6bac02857d978efc8902a0b70 , build time : Thu, 01 Aug 2019 03:18:11 UTC

zeromq-devel-4.1.4-4.ph2.x86_64.rpm | size : 116K , sha256 : d5b1fbd982ba66144a5a01ce845585300b2cb32017484d9b336380fc6cb65be6 , build time : Thu, 01 Aug 2019 03:25:30 UTC

zeromq-4.1.4-4.ph2.x86_64.rpm | size : 588K , sha256 : dd0c10fe5b6d90b91ef5285505c02abdfa7b4a987c44413ac7f621d0d2a497e3 , build time : Thu, 01 Aug 2019 03:25:30 UTC

zeromq-debuginfo-4.1.4-4.ph2.x86_64.rpm | size : 2.2M , sha256 : 0e2367f4217edcd5ebab852b7d5523c10cfc0078b279fb1a9c8ecc25b305958a , build time : Thu, 01 Aug 2019 03:25:30 UTC

python2-libs-2.7.15-9.ph2.x86_64.rpm | size : 5.7M , sha256 : eeb376c53fcc9a2f15b6a8b4b6a86f87746bd6bcc3b293d1d666da9de1ade39e , build time : Thu, 01 Aug 2019 03:17:53 UTC

python2-2.7.15-9.ph2.x86_64.rpm | size : 776K , sha256 : 630688827c093faad0b9b0aaf2ef31c64b080bc0c86865b96a3f2f9fec87a4ad , build time : Thu, 01 Aug 2019 03:17:53 UTC

python2-devel-2.7.15-9.ph2.x86_64.rpm | size : 1.1M , sha256 : 24f9e9a7e4649c942367f9a541dcacd46ae3896b839d3fca5278a7dafebbf7ea , build time : Thu, 01 Aug 2019 03:17:53 UTC

python2-tools-2.7.15-9.ph2.x86_64.rpm | size : 12K , sha256 : 569ad7e23fa3de4f25080833b8e6af4717caafffb435406d855a3dbf7bb0da10 , build time : Thu, 01 Aug 2019 03:17:53 UTC

python2-test-2.7.15-9.ph2.x86_64.rpm | size : 2.6M , sha256 : af7440cc4be57428b50e156ed367cb9e9078df7f5937fe5bb7832752ffde0f28 , build time : Thu, 01 Aug 2019 03:17:53 UTC

python2-debuginfo-2.7.15-9.ph2.x86_64.rpm | size : 6.1M , sha256 : 4554f16e2303627691f85d61550b1d9f4623a90fb27e6581effb1a6b1e5382d8 , build time : Thu, 01 Aug 2019 03:17:53 UTC

apache-tomcat-8.5.40-2.ph2.noarch.rpm | size : 7.4M , sha256 : caa6bb03ca3d35fead4e5d1aa408d0b1d42feceaff249a4a35c1f138922237fe , build time : Thu, 01 Aug 2019 03:39:14 UTC

curl-devel-7.59.0-8.ph2.x86_64.rpm | size : 660K , sha256 : ecdba56215d65f1fa0a608206cee2b697c66a1ca821e4c31111aed3e97562b6e , build time : Thu, 01 Aug 2019 03:26:21 UTC

curl-7.59.0-8.ph2.x86_64.rpm | size : 180K , sha256 : 661a812718fd5992e77e336de56dd607447ad58c01121b751d2491fa6f1afe0f , build time : Thu, 01 Aug 2019 03:26:21 UTC

curl-libs-7.59.0-8.ph2.x86_64.rpm | size : 260K , sha256 : c2dff88c8a2688c63deb7f53bb04074e6ae61909b426dce0384fab6971191711 , build time : Thu, 01 Aug 2019 03:26:21 UTC

curl-debuginfo-7.59.0-8.ph2.x86_64.rpm | size : 36K , sha256 : 94fd2e4dd78e4e8b81d14c4d378a549299cd9693be4539ecddf19a5407717922 , build time : Thu, 01 Aug 2019 03:26:21 UTC

systemd-devel-233-21.ph2.x86_64.rpm | size : 252K , sha256 : a25e539aa247f52a5c6cf5ae95a32007d5e1062bfccb358bae4517907c387c9d , build time : Thu, 01 Aug 2019 03:37:10 UTC

systemd-lang-233-21.ph2.x86_64.rpm | size : 80K , sha256 : e71d20ec949f187ca1bfac4ad680771bc113eb279248df516d0371e3b2cb854d , build time : Thu, 01 Aug 2019 03:37:10 UTC

systemd-debuginfo-233-21.ph2.x86_64.rpm | size : 23M , sha256 : 09a8c8e22c3e9db5f0826faa76a505fff7e62b037bfa16927305e13adeedbf44 , build time : Thu, 01 Aug 2019 03:37:10 UTC

systemd-233-21.ph2.x86_64.rpm | size : 6.0M , sha256 : cd593005ae75780e49c8a6ee99a9c3fc1e79c4fb08156faaa85ba5d3280ef452 , build time : Thu, 01 Aug 2019 03:37:10 UTC

unzip-6.0-14.ph2.x86_64.rpm | size : 136K , sha256 : 17ceaddc3c86737d3cc00e4805e426f33c8a7c1431b13f1bd982888f6b834903 , build time : Thu, 01 Aug 2019 03:25:07 UTC

unzip-debuginfo-6.0-14.ph2.x86_64.rpm | size : 484K , sha256 : a13440ea93d83a1e699464e4412848f25c0262b43e54efa87db3405c6e1095db , build time : Thu, 01 Aug 2019 03:25:07 UTC

gnupg-debuginfo-2.2.17-1.ph2.x86_64.rpm | size : 8.1M , sha256 : 164584998398f273d35810c9574f40cc69be7d8972a32c59edf5a81a83f5c568 , build time : Thu, 01 Aug 2019 03:27:01 UTC

gnupg-2.2.17-1.ph2.x86_64.rpm | size : 4.1M , sha256 : ef2603730547fef7ad81f3520d5b58eeb902a1772334e782d4265d8b16a79509 , build time : Thu, 01 Aug 2019 03:27:01 UTC

libxslt-1.1.29-6.ph2.x86_64.rpm | size : 176K , sha256 : 8adfcd1bb9d198cf9db0c7c33234cbd14024aaaca6da9bea630d2cb2c7ab335d , build time : Thu, 01 Aug 2019 03:25:21 UTC

libxslt-debuginfo-1.1.29-6.ph2.x86_64.rpm | size : 696K , sha256 : 15652d4d830ee3bc0879ec362fa26e784762ec1d7e86c5ccbaec20b9ff3fc86f , build time : Thu, 01 Aug 2019 03:25:21 UTC

libxslt-devel-1.1.29-6.ph2.x86_64.rpm | size : 340K , sha256 : adde1ed4fea331eae37c3a63d83fb3bd312a7d22bb6c35ffc5e7aad0669824f3 , build time : Thu, 01 Aug 2019 03:25:21 UTC

libssh2-debuginfo-1.9.0-1.ph2.x86_64.rpm | size : 500K , sha256 : 7b1699b1fb05e12d885cff204dcf60753a5af59a2df9e0040cb0eff466ff03f0 , build time : Thu, 01 Aug 2019 03:25:02 UTC

libssh2-1.9.0-1.ph2.x86_64.rpm | size : 116K , sha256 : c78ca674839f7b31fdd39100147de0ecdcb0f917fea466d37a4b1a46bd72813d , build time : Thu, 01 Aug 2019 03:25:02 UTC

libssh2-devel-1.9.0-1.ph2.x86_64.rpm | size : 132K , sha256 : 4589edb06b97d199c72bf53ac6e5241452bc430844723712fa07081963cb98c8 , build time : Thu, 01 Aug 2019 03:25:02 UTC