Security Update 3.0 174

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2020-3.0-0174

Type : Security

Severity : ['Important', 'Moderate', 'Low']

Issue date : 2020-12-10

Affected Release: 3.0

Details

Updates of ['linux-esx', 'linux-aws', 'curl', 'linux', 'linux-secure', 'linux-rt'] packages of Photon OS have been released.

Affected Packages

Important

linux-esx - ['CVE-2019-19377', 'CVE-2020-14351']

linux-aws - ['CVE-2019-19377', 'CVE-2020-14351']

curl - ['CVE-2020-8285', 'CVE-2020-8286']

linux - ['CVE-2019-19377', 'CVE-2020-14351']

linux-secure - ['CVE-2019-19377', 'CVE-2020-14381', 'CVE-2020-14351']

linux-rt - ['CVE-2019-19377', 'CVE-2020-14381', 'CVE-2020-14351']

Moderate

linux-esx - ['CVE-2020-25656', 'CVE-2020-27777', 'CVE-2019-20908', 'CVE-2020-27675', 'CVE-2020-27673']

linux-aws - ['CVE-2020-25656', 'CVE-2020-27777', 'CVE-2019-20908', 'CVE-2020-27675', 'CVE-2020-27673']

linux - ['CVE-2020-25656', 'CVE-2020-27777', 'CVE-2019-20908', 'CVE-2020-27675', 'CVE-2020-27673']

linux-secure - ['CVE-2020-25656', 'CVE-2020-27777', 'CVE-2019-20908', 'CVE-2020-27675', 'CVE-2020-27673']

linux-rt - ['CVE-2020-25656', 'CVE-2020-27777', 'CVE-2019-20908', 'CVE-2020-27675', 'CVE-2020-27673']

Low

curl - ['CVE-2020-8284']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux-esx', 'linux-aws', 'linux', 'linux-secure', 'linux-rt'] after updating, a reboot is required for taking effect.

Updated Packages Information

curl-7.61.1-9.ph3.x86_64.rpm | size : 128K , sha256 : 2bfdd9b8155362f75fb33237564325f86eb765a532194b70131d929e4131e3ab , build time : Wed, 09 Dec 2020 10:16:45 UTC

curl-devel-7.61.1-9.ph3.x86_64.rpm | size : 688K , sha256 : 127e352d59fbe843c46e2fe91a68f4bbe971da165236a5abc544c436c3a044d1 , build time : Wed, 09 Dec 2020 10:16:45 UTC

curl-libs-7.61.1-9.ph3.x86_64.rpm | size : 264K , sha256 : 5af51d15348e111b9bf480ae15db0c8db6cfb4da0851d300f65498e75035145d , build time : Wed, 09 Dec 2020 10:16:45 UTC