Security Updates 3.0 0024

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2019-3.0-0024
Type : Security
Severity : {'Low', 'Critical', 'Important'}
Issued on : 2019-07-31
Affected Versions : Photon OS 3.0

Details

An update of {'python2', 'glib', 'libxml2', 'apache-tomcat', 'zeromq', 'libxslt', 'unzip', 'redis', 'oniguruma', 'gnupg', 'systemd', 'ntp'} packages of Photon OS has been released.

Affected Packages:

Critical

zeromq - ['CVE-2019-13132']
oniguruma - ['CVE-2019-13224']

Important

glib - ['CVE-2019-13012']
apache-tomcat - ['CVE-2019-10072']
libxslt - ['CVE-2019-13117', 'CVE-2019-13118']
unzip - ['CVE-2019-13232']
redis - ['CVE-2019-10193', 'CVE-2019-10192']
systemd - ['CVE-2019-3843', 'CVE-2019-3844']
gnupg - ['CVE-2018-1000858', 'CVE-2019-13050']
ntp - ['CVE-2019-8936']

Low

python2 - ['CVE-2018-20852']
libxml2 - ['CVE-2018-9251']
systemd - ['CVE-2019-6454']

Solution

Update the affected packages (tdnf update package)
Note: For packages ['systemd'] after updating, a reboot is required for taking effect.

Updated Packages Information

python2-test-2.7.15-9.ph3.x86_64.rpm , sha256 : bbac3768e2b88de6be09b47953ed46c23f9f2a55537de9f7f407ff73df0d4984 , size : 2.6M , build_date : Mon, 29 Jul 2019 19:10:22 UTC
python2-2.7.15-9.ph3.x86_64.rpm , sha256 : eebbb442fd48c8eb01a2c0e31856683a0d5f4d2049989075ea76cd7391e16b70 , size : 762K , build_date : Mon, 29 Jul 2019 19:10:22 UTC
python2-tools-2.7.15-9.ph3.x86_64.rpm , sha256 : b56a7a1f8f0c7e0c86659f081ad98a805307e9ce0a04c664a295619fa7080be0 , size : 9.7K , build_date : Mon, 29 Jul 2019 19:10:22 UTC
python2-debuginfo-2.7.15-9.ph3.x86_64.rpm , sha256 : 1a786e10dd41d9422d4c391a516606e90d75337ee3e0326d01d8ab151e29129a , size : 6.0M , build_date : Mon, 29 Jul 2019 19:10:22 UTC
python2-libs-2.7.15-9.ph3.x86_64.rpm , sha256 : 72891741797d783817cbe2df33ffca4cd930d0d7047df260545e5397e376bdd3 , size : 5.7M , build_date : Mon, 29 Jul 2019 19:10:22 UTC
python2-devel-2.7.15-9.ph3.x86_64.rpm , sha256 : 790ca653ea3513059d3545cfcddbcd74298c6af65872f7920db185278e6edca9 , size : 1.1M , build_date : Mon, 29 Jul 2019 19:10:22 UTC
glib-debuginfo-2.58.0-4.ph3.x86_64.rpm , sha256 : 1b60d0f5fec07f42c19c105762be7e66bef14e7218f4b22eb1f90b59dbfe350d , size : 6.3M , build_date : Mon, 29 Jul 2019 19:12:51 UTC
glib-schemas-2.58.0-4.ph3.x86_64.rpm , sha256 : c36afe3f4a48b0d67a0167c8064ded57c6773f2af56e460bc469fecc782cda21 , size : 37K , build_date : Mon, 29 Jul 2019 19:12:51 UTC
glib-2.58.0-4.ph3.x86_64.rpm , sha256 : 775e984020d8456c1a20e207143d5117120aa4b2a00a578f9542adbaefd0f930 , size : 1.3M , build_date : Mon, 29 Jul 2019 19:12:51 UTC
glib-devel-2.58.0-4.ph3.x86_64.rpm , sha256 : 196f3987b1f826dccab5dfb45661f55c6d9651d4f9fac9c13c0b38ce2565f895 , size : 3.1M , build_date : Mon, 29 Jul 2019 19:12:51 UTC
libxml2-devel-2.9.9-1.ph3.x86_64.rpm , sha256 : 63605cf6036eef5f761c0f7cc3b6ae63e75b0e9623d786c1ea41b14358d1faf4 , size : 96K , build_date : Mon, 29 Jul 2019 19:12:00 UTC
libxml2-python-2.9.9-1.ph3.x86_64.rpm , sha256 : 1bb8b5c76abf0802dfed8549b61076ad0b44986f0fa49e7d4c2e061e840b5907 , size : 182K , build_date : Mon, 29 Jul 2019 19:12:00 UTC
python3-libxml2-2.9.9-1.ph3.x86_64.rpm , sha256 : a4330b3b03ad86e2e2945cdc02d5b030ae90b7b8130667bbb4914cf3d322f8c3 , size : 183K , build_date : Mon, 29 Jul 2019 19:12:00 UTC
libxml2-2.9.9-1.ph3.x86_64.rpm , sha256 : 75697f4dfd2d214e8346928fdd5058de2d95dce75437b6a8d23060005c0b2cfd , size : 1.6M , build_date : Mon, 29 Jul 2019 19:12:00 UTC
libxml2-debuginfo-2.9.9-1.ph3.x86_64.rpm , sha256 : c71c33ddfe423830f5d7c7d4331801e7ef9b299e3a1e5ecb2977049cc4b75ec0 , size : 2.9M , build_date : Mon, 29 Jul 2019 19:12:00 UTC
apache-tomcat-8.5.40-2.ph3.noarch.rpm , sha256 : ee3a6e07ccf9f5038f96de276fe259d2fd97ac0758b79d3db53f443a03e17a61 , size : 7.4M , build_date : Mon, 29 Jul 2019 19:22:29 UTC
zeromq-devel-4.2.3-2.ph3.x86_64.rpm , sha256 : 3d53e7890866d05bf88e64ed17009d6ff99db3a643f0b57868f3889505434d4a , size : 144K , build_date : Mon, 29 Jul 2019 19:11:34 UTC
zeromq-4.2.3-2.ph3.x86_64.rpm , sha256 : fff31654e0ba8b036fe5f15511f28f676fe3ae53beee586480b48673a1cc552a , size : 305K , build_date : Mon, 29 Jul 2019 19:11:34 UTC
zeromq-debuginfo-4.2.3-2.ph3.x86_64.rpm , sha256 : c74eb007e79c1b1f0f3c34f7ee145032e5c4ba67ea12069c766897f2ecade537 , size : 3.3M , build_date : Mon, 29 Jul 2019 19:11:34 UTC
libxslt-1.1.32-4.ph3.x86_64.rpm , sha256 : 748eeee1f2c377fcaf2a53644d83bea7e8d01fe7eddb788f44a7b8883806409b , size : 172K , build_date : Mon, 29 Jul 2019 19:12:28 UTC
libxslt-debuginfo-1.1.32-4.ph3.x86_64.rpm , sha256 : b6e2a6b84a625d45416d3cff5a57a90aad7ba926287e137cbe580365587424e2 , size : 695K , build_date : Mon, 29 Jul 2019 19:12:28 UTC
libxslt-devel-1.1.32-4.ph3.x86_64.rpm , sha256 : 375f756dc250e5ae1228717777ce45ba4e8d306ba0123cfa72bd1ca14fc185c5 , size : 346K , build_date : Mon, 29 Jul 2019 19:12:28 UTC
unzip-debuginfo-6.0-13.ph3.x86_64.rpm , sha256 : 454c5b8ef2df727542e92e0435ce9c32b78af7b79c742d01d03a30cf2bacc126 , size : 485K , build_date : Mon, 29 Jul 2019 19:10:59 UTC
unzip-6.0-13.ph3.x86_64.rpm , sha256 : a5300feb751b60c00f4369a563c5dab9911d81b1de4a3d03eb064b32b13ae8e2 , size : 129K , build_date : Mon, 29 Jul 2019 19:10:59 UTC
redis-5.0.5-1.ph3.x86_64.rpm , sha256 : ebb3cf2f63a0f8b6f77b044041182ade7f0f4fba1d5a061878676e94a037fa18 , size : 2.9M , build_date : Mon, 29 Jul 2019 19:19:44 UTC
redis-debuginfo-5.0.5-1.ph3.x86_64.rpm , sha256 : 77f7ed3acb8bbd354a97f5ba6979466484dae514485a7b769a4f2ff61267691b , size : 9.0M , build_date : Mon, 29 Jul 2019 19:19:44 UTC
oniguruma-debuginfo-6.9.0-2.ph3.x86_64.rpm , sha256 : a9a51a16368278b07b53c95b5002a28b4a29b31c803eeecaad4d5cc0e02e395c , size : 591K , build_date : Mon, 29 Jul 2019 19:11:34 UTC
oniguruma-devel-6.9.0-2.ph3.x86_64.rpm , sha256 : f75bd1d1a49656d4cc21f247a1acfa71e7e47ca25ce4cbececeeb1b946572a5f , size : 29K , build_date : Mon, 29 Jul 2019 19:11:34 UTC
oniguruma-6.9.0-2.ph3.x86_64.rpm , sha256 : 4bf0da29d73539b7aeedbd07dab0927517c5b16d379bd7b72e02d92a1585f17e , size : 187K , build_date : Mon, 29 Jul 2019 19:11:34 UTC
gnupg-2.2.17-1.ph3.x86_64.rpm , sha256 : 44992b6ad4bd38f6a700615101c648bb86b07dbd490c7b23165c2165b2224a12 , size : 4.0M , build_date : Mon, 29 Jul 2019 19:11:56 UTC
gnupg-debuginfo-2.2.17-1.ph3.x86_64.rpm , sha256 : 29bd5de2e41914b31ecdb38365fdc8cb578f4eee231933824bf2c885fb6aae92 , size : 8.1M , build_date : Mon, 29 Jul 2019 19:11:56 UTC
systemd-239-12.ph3.x86_64.rpm , sha256 : 6c3109c181946e4fa523d20f1877ce1b8858cbd792aeab2097ea658d99b46af3 , size : 6.4M , build_date : Mon, 29 Jul 2019 19:15:58 UTC
systemd-lang-239-12.ph3.x86_64.rpm , sha256 : 7e78d50215076c8e1de6e040c14d7e4fd2bb872e9f70e149ede90fddf54dd483 , size : 94K , build_date : Mon, 29 Jul 2019 19:15:58 UTC
systemd-debuginfo-239-12.ph3.x86_64.rpm , sha256 : 668a01a7e701bead9457a58a07e01950917e5a90b3046276061bc990b41c8ded , size : 613K , build_date : Mon, 29 Jul 2019 19:15:58 UTC
systemd-devel-239-12.ph3.x86_64.rpm , sha256 : 9e296cffdfd3dba0901b348f16230b589f36c6b788ac85dc9c5101d28056c4cc , size : 293K , build_date : Mon, 29 Jul 2019 19:15:58 UTC
ntp-debuginfo-4.2.8p13-1.ph3.x86_64.rpm , sha256 : 917c6b53ecaa32699fe8eb341c2f55537c62fedfdce2df56cfc3476928ed10dd , size : 4.2M , build_date : Mon, 29 Jul 2019 19:28:17 UTC
ntp-4.2.8p13-1.ph3.x86_64.rpm , sha256 : 89ffea09cdb422f0b716a4b1eabc7653cb90ce3143961a5afecbd2d2e81f3dd9 , size : 3.5M , build_date : Mon, 29 Jul 2019 19:28:17 UTC
ntp-perl-4.2.8p13-1.ph3.x86_64.rpm , sha256 : 3b3bc7266cd1961e4da9697358d73be7ff02478ce5d047986aaa2acc8fece25b , size : 27K , build_date : Mon, 29 Jul 2019 19:28:17 UTC