# [Critical] Photon OS Security Update ## Summary Advisory ID : PHSA-2019-3.0-0035 Type : Security Severity : {'Critical', 'Important', 'Moderate', 'Low'} Issued on : 2019-10-18 Affected Versions : Photon OS 3.0 ## Details An update of {'httpd', 'unbound', 'python2', 'subversion', 'sudo', 'openjdk8'} packages of Photon OS has been released. ## Affected Packages: ### Critical httpd - ['[CVE-2019-10082](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10082)'] ### Important httpd - ['[CVE-2019-10081](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10081)'] unbound - ['[CVE-2019-16866](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16866)'] subversion - ['[CVE-2018-11803](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-11803)', '[CVE-2019-0203](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0203)'] sudo - ['[CVE-2019-14287](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-14287)'] ### Moderate httpd - ['[CVE-2019-10098](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10098)', '[CVE-2019-10092](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10092)'] subversion - ['[CVE-2018-11782](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-11782)'] python2 - ['[CVE-2019-16935](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16935)'] ### Low openjdk8 - ['[CVE-2019-2816](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-2816)', '[CVE-2019-2766](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-2766)', '[CVE-2019-2786](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-2786)', '[CVE-2019-2762](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-2762)', '[CVE-2019-2769](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-2769)', '[CVE-2019-2842](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-2842)', '[CVE-2019-2745](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-2745)', '[CVE-2019-2818](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-2818)', '[CVE-2019-2821](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-2821)'] ## Solution Update the affected packages (tdnf update _package_) ## Updated Packages Information httpd-debuginfo-2.4.41-1.ph3.x86_64.rpm , sha256 : 46014fa23743d2162ec9a41d18ce59087da444ecbc4e0aeb35f3b64d7d0ddb5a , size : 5.3M , build_date : Thu, 17 Oct 2019 18:32:35 UTC httpd-devel-2.4.41-1.ph3.x86_64.rpm , sha256 : 88170c23dcfddac5a8a9ac38a309e9464d6d643fc83536e69fccb7b860478e8b , size : 195K , build_date : Thu, 17 Oct 2019 18:32:35 UTC httpd-tools-2.4.41-1.ph3.x86_64.rpm , sha256 : 6abd482ccc1c7d326e1093f78ffb9402599846bf3eac99bb3b4204dbd7075b73 , size : 19K , build_date : Thu, 17 Oct 2019 18:32:35 UTC httpd-2.4.41-1.ph3.x86_64.rpm , sha256 : 1df619a49c96b70e102c1ed92206eb7a4c840008b3b1647c3ca66844af7fb677 , size : 1.8M , build_date : Thu, 17 Oct 2019 18:32:35 UTC httpd-docs-2.4.41-1.ph3.x86_64.rpm , sha256 : 4e98350e320ae77f15736d02f65d2e0294d31380f1e61d7335b9dee5c0db0fb6 , size : 5.4M , build_date : Thu, 17 Oct 2019 18:32:35 UTC unbound-1.8.0-2.ph3.x86_64.rpm , sha256 : 68c74144383d83edc341d4e897f4d797bbabf4bfcf3e891f07293f32b5f725c6 , size : 1.7M , build_date : Thu, 17 Oct 2019 18:32:46 UTC unbound-debuginfo-1.8.0-2.ph3.x86_64.rpm , sha256 : fc9e13c2616dd2ec21069886fada667885f7a21d258e12943760f6f0d64ceffe , size : 5.4M , build_date : Thu, 17 Oct 2019 18:32:46 UTC unbound-devel-1.8.0-2.ph3.x86_64.rpm , sha256 : 8e6b4f11359d9ae1ad138160202b5e04de8fffbfd504df217abcda45096f427b , size : 17K , build_date : Thu, 17 Oct 2019 18:32:46 UTC unbound-docs-1.8.0-2.ph3.x86_64.rpm , sha256 : f454757c75ac619709af277565fac086660c9b7901ba1878f7ac7df198480428 , size : 63K , build_date : Thu, 17 Oct 2019 18:32:46 UTC python2-2.7.15-11.ph3.x86_64.rpm , sha256 : 3c86917d424c9610092c25ea149e8e3cd01abfbd7cbbba464edb13be5f4ae3f9 , size : 762K , build_date : Thu, 17 Oct 2019 18:22:52 UTC python2-libs-2.7.15-11.ph3.x86_64.rpm , sha256 : 44fd07abbacd1469ca7ee7ae6273f821fbde2e4edcd32aa027a87f7566e95499 , size : 5.7M , build_date : Thu, 17 Oct 2019 18:22:52 UTC python2-devel-2.7.15-11.ph3.x86_64.rpm , sha256 : cca2d25608aae8808af055152d7f43e72bff9e454ff7905c58773fbc484db11f , size : 1.1M , build_date : Thu, 17 Oct 2019 18:22:52 UTC python2-test-2.7.15-11.ph3.x86_64.rpm , sha256 : 22ec84d52434f5f0bd9f9c04c0d09239320f83d8e8a39007d3594da86adff965 , size : 2.6M , build_date : Thu, 17 Oct 2019 18:22:52 UTC python2-tools-2.7.15-11.ph3.x86_64.rpm , sha256 : 5a3d9571195ea6bb44a981be82438f98cd24a79261df45dcabf3479d8278750e , size : 9.8K , build_date : Thu, 17 Oct 2019 18:22:52 UTC python2-debuginfo-2.7.15-11.ph3.x86_64.rpm , sha256 : 66498bd1b6f16499ac6920b1912cf2d600bf4c36ef3e5456b2ee547e86166560 , size : 6.0M , build_date : Thu, 17 Oct 2019 18:22:52 UTC subversion-perl-1.10.2-5.ph3.x86_64.rpm , sha256 : 95416016f95d0c63772f60d7e92583140ce64ca19b20d5666dd92a29caa82381 , size : 1.4M , build_date : Thu, 17 Oct 2019 18:35:44 UTC subversion-1.10.2-5.ph3.x86_64.rpm , sha256 : 1fd0e2b617f3e3f1a87d801e29382ee7b09e000e8ff4dc588a3a10dd03da8e46 , size : 2.8M , build_date : Thu, 17 Oct 2019 18:35:44 UTC subversion-devel-1.10.2-5.ph3.x86_64.rpm , sha256 : 293f9d42e7f116a88d9d4c1281e5b7db8aca84e2f3a360d8545d656690bd5f79 , size : 395K , build_date : Thu, 17 Oct 2019 18:35:44 UTC subversion-debuginfo-1.10.2-5.ph3.x86_64.rpm , sha256 : 55dc7c0584e676aaa4278abe13e832a0b2fa4663de327070bc475d3018aff1e4 , size : 13M , build_date : Thu, 17 Oct 2019 18:35:44 UTC sudo-debuginfo-1.8.23-2.ph3.x86_64.rpm , sha256 : 1b9ac5d3f6a484418c53fd1fedeb5e76833f6e20ead0ffb87e9486797bb205e7 , size : 953K , build_date : Thu, 17 Oct 2019 18:36:37 UTC sudo-1.8.23-2.ph3.x86_64.rpm , sha256 : 027aa4e856612a1642a85309d78847cec9848fb3d908ebcc19ddbb051b2bd683 , size : 1.3M , build_date : Thu, 17 Oct 2019 18:36:37 UTC openjdk8-doc-1.8.0.222-1.ph3.x86_64.rpm , sha256 : 3930115bd269e9c29f079b5ad18355f7a0e852a1da81133d9af27222ab4c072f , size : 2.4M , build_date : Thu, 17 Oct 2019 18:45:56 UTC openjdk8-sample-1.8.0.222-1.ph3.x86_64.rpm , sha256 : e02b266594c6d315d0eb41cc5943d0dd3646b874271f174729aced935d825e6b , size : 462K , build_date : Thu, 17 Oct 2019 18:45:56 UTC openjdk8-1.8.0.222-1.ph3.x86_64.rpm , sha256 : 24b11228fb53434aaea2867a8b27bba4b500120b8ab4343bb16d0a6ccc5c7299 , size : 12M , build_date : Thu, 17 Oct 2019 18:45:56 UTC openjdk8-debuginfo-1.8.0.222-1.ph3.x86_64.rpm , sha256 : 7045c70207d31fc9c844ae0a091fe420b817618a06af7180c8a0ab2df70abd33 , size : 10M , build_date : Thu, 17 Oct 2019 18:45:56 UTC openjdk8-src-1.8.0.222-1.ph3.x86_64.rpm , sha256 : 38cce5a145f9813617417ae07329ebb9574318cff28255146b6c345018babbac , size : 47M , build_date : Thu, 17 Oct 2019 18:45:56 UTC