Security Updates 3.0 0003

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2019-3.0-0003
Type : Security
Severity : {'Important', 'Low', 'Moderate', 'Critical'}
Issued on : 2019-03-06
Affected Versions : Photon OS 3.0

Details

An update of {'python3', 'openssh', 'nginx', 'libsolv', 'perl', 'kubernetes'} packages of Photon OS has been released.

Affected Packages:

Critical

kubernetes - ['CVE-2018-1002105']
perl - ['CVE-2018-18311', 'CVE-2018-18312']

Important

python3 - ['CVE-2018-20406']
nginx - ['CVE-2018-16843', 'CVE-2018-16844']

Moderate

libsolv - ['CVE-2018-20534', 'CVE-2018-20532', 'CVE-2018-20533']

Low

openssh - ['CVE-2018-20685']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

python3-pip-3.7.0-4.ph3.noarch.rpm , sha256 : 137ba0acace8311cfedac4a43b591b0c249974c923c14aac012c5bf967ad4eef , size : 1.2M , build_date : Wed, 06 Mar 2019 14:48:14 UTC
python3-setuptools-3.7.0-4.ph3.noarch.rpm , sha256 : 3f0e09bd686ba4156fc4dc3a853747a5494765db5a0915b49eda050c7635dc27 , size : 549K , build_date : Wed, 06 Mar 2019 14:48:14 UTC
python3-libs-3.7.0-4.ph3.x86_64.rpm , sha256 : fbdb5474f4967f556687ec2395e39c48b4e46218220a2ca2fecf737e3fdb4d37 , size : 7.5M , build_date : Wed, 06 Mar 2019 14:48:14 UTC
python3-test-3.7.0-4.ph3.x86_64.rpm , sha256 : 778a30bbd1dfeea3f1581adf9aaca036b846ab99e2ee79e668d2e29b736f8274 , size : 3.6M , build_date : Wed, 06 Mar 2019 14:48:14 UTC
python3-xml-3.7.0-4.ph3.x86_64.rpm , sha256 : ee3758d435c00d949fdff7297dfc78d507098e26d949ddc8bc42321d028ecc87 , size : 93K , build_date : Wed, 06 Mar 2019 14:48:14 UTC
python3-debuginfo-3.7.0-4.ph3.x86_64.rpm , sha256 : 2a2276de6b8703d65d2d7cb250c0a126dddd00892a57d113e0bd179166bfcf84 , size : 8.7M , build_date : Wed, 06 Mar 2019 14:48:14 UTC
python3-devel-3.7.0-4.ph3.x86_64.rpm , sha256 : 931ef0fe63244543375845ba421cc159b014134fd6bf84afdaf9a320208d7c67 , size : 178K , build_date : Wed, 06 Mar 2019 14:48:14 UTC
python3-3.7.0-4.ph3.x86_64.rpm , sha256 : bec73a583c99c382e3f1f38ec7ae127c822f028aebfffa9cc4fd543184b32665 , size : 1.1M , build_date : Wed, 06 Mar 2019 14:48:14 UTC
python3-curses-3.7.0-4.ph3.x86_64.rpm , sha256 : a1af9d7a9fde5ab048007e32a6d14f13aa7cc9277350f8a0a7c3811ec94043d7 , size : 50K , build_date : Wed, 06 Mar 2019 14:48:14 UTC
python3-tools-3.7.0-4.ph3.x86_64.rpm , sha256 : 1e95c82645998db5af20e7fca2806c2c68c13de7fcb2fec01f7033b4c360ca33 , size : 172K , build_date : Wed, 06 Mar 2019 14:48:14 UTC
openssh-debuginfo-7.8p1-2.ph3.x86_64.rpm , sha256 : 9d068ef63227304174a78856d73ae429935a355ea9451028939d790111d9c563 , size : 4.4M , build_date : Wed, 06 Mar 2019 14:50:10 UTC
openssh-7.8p1-2.ph3.x86_64.rpm , sha256 : 369685ff5a7f298c685a1c5c160930f32b586d16fae4d36c19fd11f3c3542670 , size : 9.7K , build_date : Wed, 06 Mar 2019 14:50:10 UTC
openssh-clients-7.8p1-2.ph3.x86_64.rpm , sha256 : 9f38b57b19fb6491877599c47d40219917f5f0cb8c0b9111f0d9e7619770d0c9 , size : 1.4M , build_date : Wed, 06 Mar 2019 14:50:10 UTC
openssh-server-7.8p1-2.ph3.x86_64.rpm , sha256 : d5d8e7ed1a3bd1cdd6e3e7a2cb15557770cdd8815b73e99fd261793342b04eee , size : 432K , build_date : Wed, 06 Mar 2019 14:50:10 UTC
nginx-debuginfo-1.15.3-5.ph3.x86_64.rpm , sha256 : 2725a824caaf7e2572e0cf0bc0b94d015b685aafa4bbfb2d6412bd5c1d66a268 , size : 4.4M , build_date : Wed, 06 Mar 2019 14:45:35 UTC
nginx-1.15.3-5.ph3.x86_64.rpm , sha256 : b4d32a9bf112070c8c89e607c05e135c91013524fd96051d836d169eccc6578b , size : 542K , build_date : Wed, 06 Mar 2019 14:45:35 UTC
libsolv-devel-0.6.26-5.ph3.x86_64.rpm , sha256 : 7adc7acf73f5ed5c6420ebfab4c298561d8c7f02dfcd00cf49cff23a02659264 , size : 95K , build_date : Wed, 06 Mar 2019 14:48:51 UTC
libsolv-debuginfo-0.6.26-5.ph3.x86_64.rpm , sha256 : 38bdfa75fb2c79ba5029289ba206bb91587c49618c526a272896fdf9dabacec2 , size : 48K , build_date : Wed, 06 Mar 2019 14:48:51 UTC
libsolv-0.6.26-5.ph3.x86_64.rpm , sha256 : 27640791d124112f1e74290602cafe5a929c7c5b304f2a0eea3d425c7a56cd49 , size : 329K , build_date : Wed, 06 Mar 2019 14:48:51 UTC
perl-debuginfo-5.28.0-3.ph3.x86_64.rpm , sha256 : 9df033160806d8521561f186f1423aba1b5e5558a3acd42e4a2c3b695fb853a1 , size : 298K , build_date : Wed, 06 Mar 2019 14:44:40 UTC
perl-5.28.0-3.ph3.x86_64.rpm , sha256 : d893bf6d278e4c722767c842df8e309398136119f5b94ae2ede3c457737da893 , size : 20M , build_date : Wed, 06 Mar 2019 14:44:40 UTC
kubernetes-kubeadm-1.12.5-2.ph3.x86_64.rpm , sha256 : 5e03fc18bc674eb2b339f5a2d5cff917f5966def4964edebbfef33e39d6f3bd2 , size : 9.2M , build_date : Wed, 06 Mar 2019 14:57:07 UTC
kubernetes-pause-1.12.5-2.ph3.x86_64.rpm , sha256 : 3d4b6363149a68728d04a73cc8b24908872aa3fa5238609738940f04ec465f25 , size : 281K , build_date : Wed, 06 Mar 2019 14:57:07 UTC
kubernetes-debuginfo-1.12.5-2.ph3.x86_64.rpm , sha256 : 3b8ad5c1b16e432db71252e6660a77cf1cebf1ae79e86ca01f38be45a000d0eb , size : 83M , build_date : Wed, 06 Mar 2019 14:57:07 UTC
kubernetes-kubectl-extras-1.12.5-2.ph3.x86_64.rpm , sha256 : 266bcaba77fb9599edac80fab80d893dd96a7716ea7d57ca374146b6005e0b95 , size : 37M , build_date : Wed, 06 Mar 2019 14:57:07 UTC
kubernetes-1.12.5-2.ph3.x86_64.rpm , sha256 : 6ad7c1abaca580b86fe2e0372d28e7e72f76d07a0d35ca63e8b4a82e8f8a48ab , size : 161M , build_date : Wed, 06 Mar 2019 14:57:07 UTC