# [Important] Photon OS Security Update ## Summary Advisory ID : PHSA-2019-1.0-0227 Type : Security Severity : {'Important', 'Moderate'} Issued on : 2019-04-24 Affected Versions : Photon OS 1.0 ## Details An update of {'apache-tomcat', 'polkit', 'libarchive'} packages of Photon OS has been released. ## Affected Packages: ### Important polkit - ['[CVE-2018-19788](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-19788)'] apache-tomcat - ['[CVE-2019-0199](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0199)'] ### Moderate libarchive - ['[CVE-2019-1000019](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1000019)', '[CVE-2018-1000879](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000879)', '[CVE-2019-1000020](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1000020)', '[CVE-2018-1000880](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000880)'] ## Solution Update the affected packages (tdnf update _package_) ## Updated Packages Information apache-tomcat-8.5.40-1.ph1.noarch.rpm , sha256 : e32cf2fb68242b88bc0c88b92f9414fbe3f1919be06e78b48c7570ec8acecefe , size : 7.4M , build_date : Wed, 24 Apr 2019 10:05:40 UTC polkit-debuginfo-0.113-2.ph1.x86_64.rpm , sha256 : 981164b834f42b362d3681e257e632ac119ceec2548f49ec3b658004a43333d1 , size : 455K , build_date : Wed, 24 Apr 2019 10:06:03 UTC polkit-devel-0.113-2.ph1.x86_64.rpm , sha256 : 7695ba42e9bc8aafde91a9183fb98d78657cf6d426675e745444fede565625cb , size : 88K , build_date : Wed, 24 Apr 2019 10:06:03 UTC polkit-0.113-2.ph1.x86_64.rpm , sha256 : 7276c806d049d10d56e90d32e90e51288a4a10db8efd953b8a6a0a6fc772cf5a , size : 159K , build_date : Wed, 24 Apr 2019 10:06:03 UTC libarchive-devel-3.3.1-3.ph1.x86_64.rpm , sha256 : 07a8a1c7ec40cc294a9040db5807c1bad4aa05e59f9ec292ae61d25da7632efc , size : 565K , build_date : Wed, 24 Apr 2019 10:05:53 UTC libarchive-3.3.1-3.ph1.x86_64.rpm , sha256 : 6093fc7a2d8166c10478b3489cc2f39f74ae53543296be8c615d672bbc309f6d , size : 1.1M , build_date : Wed, 24 Apr 2019 10:05:53 UTC libarchive-debuginfo-3.3.1-3.ph1.x86_64.rpm , sha256 : 559d4a533792ea2a3ae6406285cad79604dd679b8315f5711dcd937099d4b0ed , size : 3.0M , build_date : Wed, 24 Apr 2019 10:05:53 UTC