Security Update 1.0 257

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2019-0257

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2019-11-20

Affected Release: 1.0

Details

Updates of ['yum', 'linux', 'subversion', 'libarchive', 'libxslt', 'binutils', 'linux-esx', 'nodejs', 'python2', 'postgresql', 'libsoup'] packages of Photon OS have been released.

Affected Packages

Critical

yum - ['CVE-2013-1910']

libsoup - ['CVE-2019-17266']

Important

subversion - ['CVE-2018-11803']

libarchive - ['CVE-2019-18408']

libxslt - ['CVE-2019-18197']

nodejs - ['CVE-2019-5737', 'CVE-2018-12121', 'CVE-2018-12122', 'CVE-2018-12116']

python2 - ['CVE-2019-5010']

postgresql - ['CVE-2019-10208']

Moderate

linux - ['CVE-2019-18282']

binutils - ['CVE-2019-17450', 'CVE-2019-17451']

linux-esx - ['CVE-2019-18282']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux', 'linux-esx'] after updating, a reboot is required for taking effect.

Updated Packages Information

yum-3.4.3-8.ph1.noarch.rpm | size : 1.4M , sha256 : cb852e35656ba4f7d0965df5e984daf5d814870f66cb8e912727ddfbd98c93f0 , build time : Wed, 20 Nov 2019 04:48:26 UTC

linux-4.4.201-1.ph1.x86_64.rpm | size : 19M , sha256 : bae52c4bbead8a27a4936912c23f4608a91c2242497d204c88a69b5d10061cc7 , build time : Wed, 20 Nov 2019 05:09:41 UTC

linux-dev-4.4.201-1.ph1.x86_64.rpm | size : 10M , sha256 : d06504b71609bd7bc84937b129012a577af3f23e1b5f185eb667d7fb13e18c57 , build time : Wed, 20 Nov 2019 05:09:41 UTC

linux-esx-docs-4.4.201-1.ph1.x86_64.rpm | size : 6.6M , sha256 : 500927dc8b607c3d82ae7dc8ba733bfe9fcfc3596972fe72a7eef1d60ae2ee9d , build time : Wed, 20 Nov 2019 05:05:19 UTC

linux-sound-4.4.201-1.ph1.x86_64.rpm | size : 264K , sha256 : 1abdaefc2b0397bfebc1df4efae52f16658fb54e8767142aa9ab6c3e06b4daa1 , build time : Wed, 20 Nov 2019 05:09:41 UTC

linux-oprofile-4.4.201-1.ph1.x86_64.rpm | size : 48K , sha256 : e96270ca9eb5b4b6d3685370ba8c8d83e7cb729223d4718f65ac450e0012e73c , build time : Wed, 20 Nov 2019 05:09:41 UTC

linux-esx-debuginfo-4.4.201-1.ph1.x86_64.rpm | size : 192M , sha256 : 6ed43d569cbe768631eb82028a23c635f7b681e5a96e24bb750d5a204f715f49 , build time : Wed, 20 Nov 2019 05:05:19 UTC

linux-drivers-gpu-4.4.201-1.ph1.x86_64.rpm | size : 1.5M , sha256 : 514e65d574fb868bd83688e218e791483a58205d0539638e70429b7441346c83 , build time : Wed, 20 Nov 2019 05:09:41 UTC

linux-debuginfo-4.4.201-1.ph1.x86_64.rpm | size : 427M , sha256 : 137f19c9b34cee60f753f09566850497f43d4bd840530b06f603fdd54174c912 , build time : Wed, 20 Nov 2019 05:09:41 UTC

linux-esx-devel-4.4.201-1.ph1.x86_64.rpm | size : 9.8M , sha256 : eb48de064580b1d693df3840e643d6a411892041476834af94756643a69e4ed2 , build time : Wed, 20 Nov 2019 05:05:19 UTC

linux-docs-4.4.201-1.ph1.x86_64.rpm | size : 6.6M , sha256 : ea5e63b25ed8e7bb5dc2b42e7a68356f1c46504ea19094e567ed7dd868faaebc , build time : Wed, 20 Nov 2019 05:09:41 UTC

linux-api-headers-4.4.201-1.ph1.noarch.rpm | size : 1.1M , sha256 : 9227d55125d80fd7ded41f36ac734616e17eb0212e3b83d3dc710c2afe58433b , build time : Wed, 20 Nov 2019 04:39:39 UTC

linux-tools-4.4.201-1.ph1.x86_64.rpm | size : 832K , sha256 : fd122d5e9977791dba0d5967067cd0ab852fb066451a1412dabf73d88a6dd8c2 , build time : Wed, 20 Nov 2019 05:09:41 UTC

linux-esx-4.4.201-1.ph1.x86_64.rpm | size : 7.7M , sha256 : 2659bb5bad89fe0fec392f97f9b898fe8365560f48fddc356f0c542f2de8fbe5 , build time : Wed, 20 Nov 2019 05:05:19 UTC

subversion-devel-1.10.4-1.ph1.x86_64.rpm | size : 372K , sha256 : 666c026f6f1c476dc15b0906506d2445baacf6152c89ee285739a77d95bebb86 , build time : Wed, 20 Nov 2019 04:58:52 UTC

subversion-1.10.4-1.ph1.x86_64.rpm | size : 2.8M , sha256 : 5c81ca98708aba5e2d79a5490c45e542de2ae23095d4ccf7ddb43bb6e03d0f0a , build time : Wed, 20 Nov 2019 04:58:52 UTC

subversion-debuginfo-1.10.4-1.ph1.x86_64.rpm | size : 8.5M , sha256 : 8b0e1360aed8e079436254af74e72dc4c61a8832fceee2a48701b08650e12e00 , build time : Wed, 20 Nov 2019 04:58:52 UTC

libarchive-devel-3.3.1-4.ph1.x86_64.rpm | size : 568K , sha256 : 0c7f61ea2ba649818e36d80762c0a8138457535efe41493f42796eb2c919c596 , build time : Wed, 20 Nov 2019 04:49:54 UTC

libarchive-debuginfo-3.3.1-4.ph1.x86_64.rpm | size : 3.0M , sha256 : c7e527a45fe917507ef7489125da41cacc3eaa1a662e097eaa5d77e1092ab90b , build time : Wed, 20 Nov 2019 04:49:54 UTC

libarchive-3.3.1-4.ph1.x86_64.rpm | size : 1.1M , sha256 : bf4b127920eb2ec688b8175a734a6be3939131740314df669eb93c6187349495 , build time : Wed, 20 Nov 2019 04:49:54 UTC

libxslt-1.1.29-7.ph1.x86_64.rpm | size : 176K , sha256 : a74f32808076472b47e33a7d747b7b382926de35b7c9db258d77b937f71b28cb , build time : Wed, 20 Nov 2019 04:47:18 UTC

libxslt-debuginfo-1.1.29-7.ph1.x86_64.rpm | size : 636K , sha256 : 651cd3bc508e3af9fdb023493fc3c09c85474f2e41275137e6d8a2bd2141f701 , build time : Wed, 20 Nov 2019 04:47:18 UTC

libxslt-devel-1.1.29-7.ph1.x86_64.rpm | size : 336K , sha256 : 47953021e09b1c3f129994373e86bd38446b08bd4d68a897bd427f031fe4267c , build time : Wed, 20 Nov 2019 04:47:18 UTC

binutils-2.32-2.ph1.x86_64.rpm | size : 8.2M , sha256 : 4dd43c72e21bd151614fd41b94f0825acea619e26165a314f4d0e8ccd32f2814 , build time : Wed, 20 Nov 2019 04:41:52 UTC

binutils-debuginfo-2.32-2.ph1.x86_64.rpm | size : 44M , sha256 : 4e53cf273f3870f7af1a17fe0effe01dab66db06bc0ee18c5d0c892598aa7383 , build time : Wed, 20 Nov 2019 04:41:52 UTC

binutils-devel-2.32-2.ph1.x86_64.rpm | size : 756K , sha256 : 8fc342f93daa1cf0769ff4c9ad5f93db585605b49e648c9b0f0705801d0a817d , build time : Wed, 20 Nov 2019 04:41:52 UTC

linux-esx-docs-4.4.201-1.ph1.x86_64.rpm | size : 6.6M , sha256 : 500927dc8b607c3d82ae7dc8ba733bfe9fcfc3596972fe72a7eef1d60ae2ee9d , build time : Wed, 20 Nov 2019 05:05:19 UTC

linux-esx-devel-4.4.201-1.ph1.x86_64.rpm | size : 9.8M , sha256 : eb48de064580b1d693df3840e643d6a411892041476834af94756643a69e4ed2 , build time : Wed, 20 Nov 2019 05:05:19 UTC

linux-esx-debuginfo-4.4.201-1.ph1.x86_64.rpm | size : 192M , sha256 : 6ed43d569cbe768631eb82028a23c635f7b681e5a96e24bb750d5a204f715f49 , build time : Wed, 20 Nov 2019 05:05:19 UTC

linux-esx-4.4.201-1.ph1.x86_64.rpm | size : 7.7M , sha256 : 2659bb5bad89fe0fec392f97f9b898fe8365560f48fddc356f0c542f2de8fbe5 , build time : Wed, 20 Nov 2019 05:05:19 UTC

nodejs-devel-8.11.4-3.ph1.x86_64.rpm | size : 164K , sha256 : a6670d8aac062a6bcd723b8e5889a6f9dd8f2f6cd9666cbe41d75916ff8fe03e , build time : Wed, 20 Nov 2019 04:58:56 UTC

nodejs-debuginfo-8.11.4-3.ph1.x86_64.rpm | size : 1.6M , sha256 : de9e90a747798f719f86fdfe1286d092fc657ed39c2af3d25bbcb885b70565e3 , build time : Wed, 20 Nov 2019 04:58:56 UTC

nodejs-8.11.4-3.ph1.x86_64.rpm | size : 15M , sha256 : b5fc81a049e8e65368410e2677e4570b15280a0ed7d5192ce66675436944ce67 , build time : Wed, 20 Nov 2019 04:58:56 UTC

python2-libs-2.7.15-13.ph1.x86_64.rpm | size : 5.6M , sha256 : 594cf9102732eba3dbb79cfe90a9b01c01911c4c0a49c1c1e52f68133ccc9440 , build time : Wed, 20 Nov 2019 04:45:21 UTC

python2-debuginfo-2.7.15-13.ph1.x86_64.rpm | size : 5.4M , sha256 : 9a16fca37fdbe8b827232ef5446c284b0c10bad930f6429557329d0edab380b6 , build time : Wed, 20 Nov 2019 04:45:21 UTC

python2-devel-2.7.15-13.ph1.x86_64.rpm | size : 1.1M , sha256 : bd15d26cdd8bdccc0ba62404f620d5327738651f701387591dbbe24e5214105e , build time : Wed, 20 Nov 2019 04:45:21 UTC

python2-2.7.15-13.ph1.x86_64.rpm | size : 748K , sha256 : ff2648106173e92d3cde7da9043fee112a1941cc28fdcccd3cf1c8f1c91feac5 , build time : Wed, 20 Nov 2019 04:45:21 UTC

python2-tools-2.7.15-13.ph1.x86_64.rpm | size : 16K , sha256 : 77794bb9ec852208ed1dce4aadff875c1338e7de15fd4933a375a55ea247b980 , build time : Wed, 20 Nov 2019 04:45:21 UTC

postgresql-libs-9.6.14-2.ph1.x86_64.rpm | size : 1.2M , sha256 : f03577a146105353da159d847a2c196ecddafe7cedcd04c50477b258569ba725 , build time : Wed, 20 Nov 2019 04:56:03 UTC

postgresql-9.6.14-2.ph1.x86_64.rpm | size : 5.7M , sha256 : 41d184b8fa7ea24e8f84230602587859f24d4a3bf7a8a4a0ac8b0f5b4bcaaf03 , build time : Wed, 20 Nov 2019 04:56:03 UTC

postgresql-devel-9.6.14-2.ph1.x86_64.rpm | size : 944K , sha256 : 53c44d870410bdeecca40d9415e4c99ca5dda1e3dd3665f764a1e6c878ff2908 , build time : Wed, 20 Nov 2019 04:56:03 UTC

postgresql-debuginfo-9.6.14-2.ph1.x86_64.rpm | size : 532K , sha256 : 5e32a961fced31d43ee7bd0e748eafae658a852fbaf330646e48407bf54211fc , build time : Wed, 20 Nov 2019 04:56:03 UTC

libsoup-debuginfo-2.68.2-1.ph1.x86_64.rpm | size : 692K , sha256 : 8961bd6d41bf5913d0180e39cdb2564c87228a37b2c84952e122c79f31359595 , build time : Wed, 20 Nov 2019 04:54:06 UTC

libsoup-doc-2.68.2-1.ph1.x86_64.rpm | size : 344K , sha256 : fd61272ca617b55992da0dc65c6fea940060046048d88abb04f1ad8141d45e2c , build time : Wed, 20 Nov 2019 04:54:06 UTC

libsoup-2.68.2-1.ph1.x86_64.rpm | size : 248K , sha256 : f1bde9067595cd4f5cad5144299b3c5d7b8eea214f3432d00936eb3fe1f194c5 , build time : Wed, 20 Nov 2019 04:54:06 UTC

libsoup-devel-2.68.2-1.ph1.x86_64.rpm | size : 48K , sha256 : 1fe8ba5099464a8c7d56742abdc12334a926a75430c60a87fcc09626da71f537 , build time : Wed, 20 Nov 2019 04:54:06 UTC

libsoup-lang-2.68.2-1.ph1.x86_64.rpm | size : 76K , sha256 : 40b22561b3ec15bed97bfe908fc86a5d31e64938741caa9e682b8d9a39520d69 , build time : Wed, 20 Nov 2019 04:54:06 UTC