# [Important] Photon OS Security Update ## Summary Advisory ID : PHSA-2020-1.0-0288 Type : Security Severity : {'Moderate', 'Important'} Issued on : 2020-04-11 Affected Versions : Photon OS 1.0 ## Details An update of {'python2', 'openvswitch', 'kubernetes', 'libgcrypt', 'yarn', 'gnupg'} packages of Photon OS has been released. ## Affected Packages: ### Important python2 - ['[CVE-2020-8492](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8492)'] gnupg - ['[CVE-2019-14855](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-14855)'] ### Moderate openvswitch - ['[CVE-2018-17204](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-17204)', '[CVE-2018-17206](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-17206)'] yarn - ['[CVE-2019-15608](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15608)'] libgcrypt - ['[CVE-2019-12904](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-12904)'] kubernetes - ['[CVE-2019-11250](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11250)'] ## Solution Update the affected packages (tdnf update _package_) ## Updated Packages Information python2-debuginfo-2.7.15-16.ph1.x86_64.rpm , sha256 : 5c5b7b8b447c7cd2eb46354c8a13e0cee4348ccdac96d6f9edca4a49313ed18f , size : 5.4M , build_date : Thu, 09 Apr 2020 02:55:03 UTC python2-libs-2.7.15-16.ph1.x86_64.rpm , sha256 : e75c31a8ece59784fded998d0bb407313a18054b7820c026e9d63016ea596eb5 , size : 5.6M , build_date : Thu, 09 Apr 2020 02:55:03 UTC python2-tools-2.7.15-16.ph1.x86_64.rpm , sha256 : 5b305099c4cb628f4490be97962888ed0082b948ec08c9654f012329c597e2da , size : 16K , build_date : Thu, 09 Apr 2020 02:55:03 UTC python2-devel-2.7.15-16.ph1.x86_64.rpm , sha256 : 54970f6075c634d499749213fc5a9b516361c4bfd08918353d52dbb69048bf85 , size : 1.1M , build_date : Thu, 09 Apr 2020 02:55:03 UTC python2-2.7.15-16.ph1.x86_64.rpm , sha256 : c2c2a55c8d5fcdbcd8768c3144517fb550a3ed203c3018bd230a2e10da40da08 , size : 747K , build_date : Thu, 09 Apr 2020 02:55:03 UTC python2-2.7.15-16.ph1.src.rpm , sha256 : f4d7e6223b55deb3775faf8184569c863b50d245344097de978a3fafe8534c7c , size : 13M , build_date : Thu, 09 Apr 2020 02:55:03 UTC openvswitch-debuginfo-2.6.1-6.ph1.x86_64.rpm , sha256 : cfa958ad5f6f04876b3818106691e8e5e3096bce4ad26ac42e5ec078144cf8ed , size : 6.7M , build_date : Thu, 09 Apr 2020 02:58:34 UTC openvswitch-2.6.1-6.ph1.x86_64.rpm , sha256 : 66841847334fbc140204bd6402841e6ba519c90173056a87df686a55dcfbd21e , size : 539K , build_date : Thu, 09 Apr 2020 02:58:34 UTC openvswitch-devel-2.6.1-6.ph1.x86_64.rpm , sha256 : 47d7b95f041f635a6953e051f8fa50d63a5162778fe48ec5a1c93f3a227fcb32 , size : 3.1M , build_date : Thu, 09 Apr 2020 02:58:34 UTC openvswitch-doc-2.6.1-6.ph1.x86_64.rpm , sha256 : 9efa7ea8da6d273cbfa37b855a37db875471ac54c050976fcce2e5233ed3524c , size : 301K , build_date : Thu, 09 Apr 2020 02:58:34 UTC openvswitch-2.6.1-6.ph1.src.rpm , sha256 : 8e3fb2b7380b0ac8f8eaad527bd2f1b4d6e3d7b9d0ff6435b794214421f238ad , size : 5.2M , build_date : Thu, 09 Apr 2020 02:58:34 UTC kubernetes-1.13.12-2.ph1.x86_64.rpm , sha256 : dd84ef722a86b88aa147d7a2ed4c375117458585b6ebd41281cde0d70fa90e42 , size : 182M , build_date : Thu, 09 Apr 2020 03:00:48 UTC kubernetes-pause-1.13.12-2.ph1.x86_64.rpm , sha256 : f755ad698930ee82a93d5f3b878e9212840f61e90c6b3a9bf0102873de388798 , size : 316K , build_date : Thu, 09 Apr 2020 03:00:48 UTC kubernetes-kubectl-extras-1.13.12-2.ph1.x86_64.rpm , sha256 : 51f0f033f4e2a76b25bc995ea41abf6aa087d001ed4a7a2c0c2f3f65263b15ed , size : 35M , build_date : Thu, 09 Apr 2020 03:00:48 UTC kubernetes-kubeadm-1.13.12-2.ph1.x86_64.rpm , sha256 : 4022a97b41a3982128ac2174f91ddcb2bb95169d934edefbb96abce9dec2c1e7 , size : 11M , build_date : Thu, 09 Apr 2020 03:00:48 UTC kubernetes-1.13.12-2.ph1.src.rpm , sha256 : 505d67831cdaa2c9f66fab24a947c262acbfbc66a6feb2c644519f8d1c73c4d6 , size : 49M , build_date : Thu, 09 Apr 2020 03:00:48 UTC libgcrypt-debuginfo-1.7.6-6.ph1.x86_64.rpm , sha256 : 7de449cafa4e6d7355842251045e97660578c2f4226b53a11622be4a60de916f , size : 1.6M , build_date : Thu, 09 Apr 2020 02:57:06 UTC libgcrypt-devel-1.7.6-6.ph1.x86_64.rpm , sha256 : 30e364068801d24ebc40dd02579e146dab10e9813dfdc7917caf3473ddaeb791 , size : 27K , build_date : Thu, 09 Apr 2020 02:57:06 UTC libgcrypt-1.7.6-6.ph1.x86_64.rpm , sha256 : 310e52192e1833605ebae1bdb1b32a572fab0c8fbb0032cee2289afb4d8f998d , size : 466K , build_date : Thu, 09 Apr 2020 02:57:06 UTC libgcrypt-1.7.6-6.ph1.src.rpm , sha256 : c97f4b99fba3bbd22de9176a5e2f123c7e7fa1f71497c61b45ba571dfb29feab , size : 2.8M , build_date : Thu, 09 Apr 2020 02:57:06 UTC yarn-1.10.1-6.ph1.x86_64.rpm , sha256 : d898545c051641909725261c18da0e900ae42a199866814ef44c5b2a73e58963 , size : 32M , build_date : Thu, 09 Apr 2020 03:06:40 UTC yarn-1.10.1-6.ph1.src.rpm , sha256 : 901773f5b81c10e759a4e57c9a717bec651b4eb84886e5c062268dba1e99de7a , size : 102M , build_date : Thu, 09 Apr 2020 03:06:40 UTC gnupg-debuginfo-2.2.18-1.ph1.x86_64.rpm , sha256 : 54ac39dd352ffdc2331c43d90139aaeb3a28ed824710703874abdb3d44526c39 , size : 8.0M , build_date : Thu, 09 Apr 2020 03:00:47 UTC gnupg-2.2.18-1.ph1.x86_64.rpm , sha256 : 9381664aa0f68a61a34df2b610f8b1441851b391c1bf0cabfe48b09b7a9e587d , size : 4.1M , build_date : Thu, 09 Apr 2020 03:00:47 UTC gnupg-2.2.18-1.ph1.src.rpm , sha256 : 3ded5b64a10e5a1a6eadfa83d4bf3a9fa774f39b55b21beaf88c2022dc236399 , size : 6.5M , build_date : Thu, 09 Apr 2020 03:00:47 UTC