# [Critical] Photon OS Security Update ## Summary Advisory ID : PHSA-2019-2.0-0182 Type : Security Severity : {'Critical', 'Moderate', 'Important'} Issued on : 2019-10-15 Affected Versions : Photon OS 2.0 ## Details An update of {'python3', 'python2', 'subversion', 'rsyslog', 'tcpdump'} packages of Photon OS has been released. ## Affected Packages: ### Critical tcpdump - ['[CVE-2018-16228](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16228)', '[CVE-2018-14882](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14882)', '[CVE-2018-16229](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16229)', '[CVE-2018-14465](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14465)', '[CVE-2018-16301](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16301)', '[CVE-2018-14461](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14461)', '[CVE-2018-14463](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14463)', '[CVE-2018-14468](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14468)', '[CVE-2018-16227](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16227)', '[CVE-2018-14879](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14879)', '[CVE-2018-14469](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14469)', '[CVE-2018-14880](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14880)', '[CVE-2018-14462](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14462)', '[CVE-2018-14466](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14466)', '[CVE-2018-14467](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14467)', '[CVE-2018-14470](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14470)', '[CVE-2018-16451](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16451)', '[CVE-2019-15166](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15166)', '[CVE-2018-10103](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-10103)', '[CVE-2018-14464](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14464)', '[CVE-2018-14881](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-14881)', '[CVE-2018-16230](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16230)', '[CVE-2018-10105](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-10105)'] rsyslog - ['[CVE-2019-17040](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-17040)'] ### Important tcpdump - ['[CVE-2018-16300](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16300)', '[CVE-2018-16452](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16452)'] subversion - ['[CVE-2019-0203](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0203)'] ### Moderate python2 - ['[CVE-2019-16935](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16935)'] python3 - ['[CVE-2019-16935](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16935)'] subversion - ['[CVE-2018-11782](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-11782)'] ## Solution Update the affected packages (tdnf update _package_) ## Updated Packages Information python3-setuptools-3.6.5-10.ph2.noarch.rpm , sha256 : 8d024154b34f6dfc7fbfc496f8da9451cef49ce1c745570fbaee31ae3d668602 , size : 546K , build_date : Mon, 14 Oct 2019 23:42:09 UTC python3-pip-3.6.5-10.ph2.noarch.rpm , sha256 : ebd45f373475cef131aedd50ec1b7b41c7b66b4839ba1fa490e03f5a15b53e9e , size : 1.3M , build_date : Mon, 14 Oct 2019 23:42:09 UTC python3-debuginfo-3.6.5-10.ph2.x86_64.rpm , sha256 : 0114a321e32b5d433f1c66dac21ecd38fa40932f72ee24201bcdafd34d5459f8 , size : 8.2M , build_date : Mon, 14 Oct 2019 23:42:09 UTC python3-curses-3.6.5-10.ph2.x86_64.rpm , sha256 : 9d3a3411c9da8a1b489501e195d58010c445eaa7c25934712d3bafbffa684f5a , size : 56K , build_date : Mon, 14 Oct 2019 23:42:09 UTC python3-tools-3.6.5-10.ph2.x86_64.rpm , sha256 : 8ff89ac3a02f435a59b4f86c754f4eeb7b5f7f8b0007a779875c8aa4f743e97a , size : 168K , build_date : Mon, 14 Oct 2019 23:42:09 UTC python3-3.6.5-10.ph2.x86_64.rpm , sha256 : 88a54ea8f8e95e35766be9d62911370f64301f96c30f7c57fc28edd61a123945 , size : 1.1M , build_date : Mon, 14 Oct 2019 23:42:09 UTC python3-xml-3.6.5-10.ph2.x86_64.rpm , sha256 : d7964464481d9a9c46a1d58c86c9be1a921e97cd48eb96e29751aab07aaeaec4 , size : 96K , build_date : Mon, 14 Oct 2019 23:42:09 UTC python3-devel-3.6.5-10.ph2.x86_64.rpm , sha256 : 4de6dee24b8c571d455b517a40f3ff1455b6335fea83296b74603fb53d7f82ca , size : 174K , build_date : Mon, 14 Oct 2019 23:42:09 UTC python3-libs-3.6.5-10.ph2.x86_64.rpm , sha256 : 12a2f4eea645c2011a3d1af94ed3e17e80c1b78863b709b13385a98cfaea2bf9 , size : 7.5M , build_date : Mon, 14 Oct 2019 23:42:09 UTC python3-test-3.6.5-10.ph2.x86_64.rpm , sha256 : 79f2613c8be226f056e38846b2cb2cbe9e826a52705d77e8cd177eda35e1b901 , size : 3.4M , build_date : Mon, 14 Oct 2019 23:42:09 UTC python2-devel-2.7.15-11.ph2.x86_64.rpm , sha256 : 9b9bc98e023863da9cc4e3d76c65c71ce0fc1dc1c29a9f2c95ef7b5039fe94e8 , size : 1.1M , build_date : Mon, 14 Oct 2019 23:41:58 UTC python2-tools-2.7.15-11.ph2.x86_64.rpm , sha256 : a8f1386a442d4af6299970cec0423f837c6507e16b153df54a4cd56a4e444835 , size : 9.9K , build_date : Mon, 14 Oct 2019 23:41:58 UTC python2-libs-2.7.15-11.ph2.x86_64.rpm , sha256 : 1cf52e3e31bb0cde34cb4f866580ca30adbb122dccca67c25ea21585ae9e4ce3 , size : 5.7M , build_date : Mon, 14 Oct 2019 23:41:58 UTC python2-debuginfo-2.7.15-11.ph2.x86_64.rpm , sha256 : 114e5c03d71e6bfd7a0b49f6884a838d33b6690dff28bd1c506e725d4d350828 , size : 6.1M , build_date : Mon, 14 Oct 2019 23:41:58 UTC python2-2.7.15-11.ph2.x86_64.rpm , sha256 : 57aca5aeb55c4b0200d52bdaad0286839b9172126dbb0447e87366a5d7423310 , size : 773K , build_date : Mon, 14 Oct 2019 23:41:58 UTC python2-test-2.7.15-11.ph2.x86_64.rpm , sha256 : 07dac99047137d89519d86d6d2d94f39339e451f688752700181cdc6b7e301ed , size : 2.6M , build_date : Mon, 14 Oct 2019 23:41:58 UTC subversion-debuginfo-1.9.7-3.ph2.x86_64.rpm , sha256 : ad19d7c493585ad0280a6f0186e81f12f1da645cad9dfdcf27237d736c0fb42b , size : 7.9M , build_date : Mon, 14 Oct 2019 23:50:26 UTC subversion-devel-1.9.7-3.ph2.x86_64.rpm , sha256 : 2bb16d501340c1516be7cc86d7f43873d07c30ca8fe3ce280a86908ee115e5d8 , size : 356K , build_date : Mon, 14 Oct 2019 23:50:26 UTC subversion-1.9.7-3.ph2.x86_64.rpm , sha256 : 154c128826e66ffc6a37903e7dcf1d2ae9ce75126ab55cb8373251d208f8afca , size : 2.9M , build_date : Mon, 14 Oct 2019 23:50:26 UTC rsyslog-8.1907.0-1.ph2.x86_64.rpm , sha256 : 80bb075098925feadaad4d01d14034bd4b3a783fffb5d0e26f1d421ae514b365 , size : 575K , build_date : Mon, 14 Oct 2019 23:51:10 UTC rsyslog-debuginfo-8.1907.0-1.ph2.x86_64.rpm , sha256 : f713d1f81ec369e5e14a2dc23e518c967e61e0dbe35b18e021ac43e1014f319e , size : 2.5M , build_date : Mon, 14 Oct 2019 23:51:10 UTC tcpdump-debuginfo-4.9.3-1.ph2.x86_64.rpm , sha256 : ebc76d68261bbe4f0457a79e8ed6e7e4c10fa4c6000c2ef17e4399aec58625c0 , size : 2.3M , build_date : Mon, 14 Oct 2019 23:48:22 UTC tcpdump-4.9.3-1.ph2.x86_64.rpm , sha256 : 1db24b32ca9d48c0d1907a5167f3e784963292750f9ff30e18ecd3001d0cebaf , size : 830K , build_date : Mon, 14 Oct 2019 23:48:22 UTC