Security Update 2.0 171

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2019-0171

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2019-08-02

Affected Release: 2.0

Details

Updates of ['gnupg', 'libpng', 'glib', 'libssh2', 'python2', 'systemd', 'oniguruma', 'zeromq', 'expat', 'unzip', 'python3', 'curl', 'apache-tomcat', 'libxslt'] packages of Photon OS have been released.

Affected Packages

Critical

libpng - ['CVE-2017-12652']

oniguruma - ['CVE-2019-13224']

zeromq - ['CVE-2019-13132']

Important

gnupg - ['CVE-2019-13050']

glib - ['CVE-2019-13012']

libssh2 - ['CVE-2019-13115']

expat - ['CVE-2018-20843']

curl - ['CVE-2018-16890']

apache-tomcat - ['CVE-2019-10072']

libxslt - ['CVE-2019-13117', 'CVE-2019-13118']

Moderate

python2 - ['CVE-2018-20852']

systemd - ['CVE-2019-6454']

python3 - ['CVE-2018-20852']

Low

unzip - ['CVE-2019-13232']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['systemd'] after updating, a reboot is required for taking effect.

Updated Packages Information

gnupg-2.2.17-1.ph2.x86_64.rpm | size : 4.1M , sha256 : ef2603730547fef7ad81f3520d5b58eeb902a1772334e782d4265d8b16a79509 , build time : Thu, 01 Aug 2019 03:27:01 UTC

libpng-1.6.35-1.ph2.x86_64.rpm | size : 228K , sha256 : 6ee08c95e214f287d4d0722e1cb83760b5eb32ee020ce22fc4f3a99218743939 , build time : Thu, 01 Aug 2019 03:24:26 UTC

libpng-devel-1.6.35-1.ph2.x86_64.rpm | size : 56K , sha256 : 5f809342bbea77e4d562151ec58f0b502d3c2442693e4ad91ca085e3360c3195 , build time : Thu, 01 Aug 2019 03:24:26 UTC

glib-2.58.3-1.ph2.x86_64.rpm | size : 1.3M , sha256 : ee0d0f33c4e736b1ce53ccad9f7d1e3e7e93607c940988bf0e777b2f34c7e7a0 , build time : Thu, 01 Aug 2019 03:26:53 UTC

glib-devel-2.58.3-1.ph2.x86_64.rpm | size : 3.1M , sha256 : f837fc40f74da96789213156fdde89214d7bb60ce67d05aa6ea8c78612f9e370 , build time : Thu, 01 Aug 2019 03:26:53 UTC

glib-schemas-2.58.3-1.ph2.x86_64.rpm | size : 40K , sha256 : cf8dffb9d08a90c0a803aadfeb91c3f372939d29e8384cdd335d408bd160671b , build time : Thu, 01 Aug 2019 03:26:53 UTC

libssh2-1.9.0-1.ph2.x86_64.rpm | size : 116K , sha256 : c78ca674839f7b31fdd39100147de0ecdcb0f917fea466d37a4b1a46bd72813d , build time : Thu, 01 Aug 2019 03:25:02 UTC

libssh2-devel-1.9.0-1.ph2.x86_64.rpm | size : 132K , sha256 : 4589edb06b97d199c72bf53ac6e5241452bc430844723712fa07081963cb98c8 , build time : Thu, 01 Aug 2019 03:25:02 UTC

python2-2.7.15-9.ph2.x86_64.rpm | size : 776K , sha256 : 630688827c093faad0b9b0aaf2ef31c64b080bc0c86865b96a3f2f9fec87a4ad , build time : Thu, 01 Aug 2019 03:17:53 UTC

python2-libs-2.7.15-9.ph2.x86_64.rpm | size : 5.7M , sha256 : eeb376c53fcc9a2f15b6a8b4b6a86f87746bd6bcc3b293d1d666da9de1ade39e , build time : Thu, 01 Aug 2019 03:17:53 UTC

python-xml-2.7.15-9.ph2.x86_64.rpm | size : 96K , sha256 : 4efd7bc4c0af01207942f86220a1d49ad298435f6d186effdb9e19494f29d386 , build time : Thu, 01 Aug 2019 03:17:53 UTC

python-curses-2.7.15-9.ph2.x86_64.rpm | size : 56K , sha256 : e8717b7e5393b5213a63c4c391e51f40d9412441dae84f3f6727b864cb35978c , build time : Thu, 01 Aug 2019 03:17:53 UTC

python2-devel-2.7.15-9.ph2.x86_64.rpm | size : 1.1M , sha256 : 24f9e9a7e4649c942367f9a541dcacd46ae3896b839d3fca5278a7dafebbf7ea , build time : Thu, 01 Aug 2019 03:17:53 UTC

python2-tools-2.7.15-9.ph2.x86_64.rpm | size : 12K , sha256 : 569ad7e23fa3de4f25080833b8e6af4717caafffb435406d855a3dbf7bb0da10 , build time : Thu, 01 Aug 2019 03:17:53 UTC

python2-test-2.7.15-9.ph2.x86_64.rpm | size : 2.6M , sha256 : af7440cc4be57428b50e156ed367cb9e9078df7f5937fe5bb7832752ffde0f28 , build time : Thu, 01 Aug 2019 03:17:53 UTC

systemd-233-21.ph2.x86_64.rpm | size : 6.0M , sha256 : cd593005ae75780e49c8a6ee99a9c3fc1e79c4fb08156faaa85ba5d3280ef452 , build time : Thu, 01 Aug 2019 03:37:10 UTC

systemd-devel-233-21.ph2.x86_64.rpm | size : 252K , sha256 : a25e539aa247f52a5c6cf5ae95a32007d5e1062bfccb358bae4517907c387c9d , build time : Thu, 01 Aug 2019 03:37:10 UTC

systemd-lang-233-21.ph2.x86_64.rpm | size : 80K , sha256 : e71d20ec949f187ca1bfac4ad680771bc113eb279248df516d0371e3b2cb854d , build time : Thu, 01 Aug 2019 03:37:10 UTC

oniguruma-6.5.0-2.ph2.x86_64.rpm | size : 196K , sha256 : 62a7eb25a21d8d98c89d4f6d6905a50dadfd6626e67d8812b776dec23958516f , build time : Thu, 01 Aug 2019 03:24:34 UTC

zeromq-4.1.4-4.ph2.x86_64.rpm | size : 588K , sha256 : dd0c10fe5b6d90b91ef5285505c02abdfa7b4a987c44413ac7f621d0d2a497e3 , build time : Thu, 01 Aug 2019 03:25:30 UTC

zeromq-devel-4.1.4-4.ph2.x86_64.rpm | size : 116K , sha256 : d5b1fbd982ba66144a5a01ce845585300b2cb32017484d9b336380fc6cb65be6 , build time : Thu, 01 Aug 2019 03:25:30 UTC

expat-2.2.4-2.ph2.x86_64.rpm | size : 36K , sha256 : 9c61a769da92078637df9fda901f9ba5d65c16fd8906ba93f55ab79214d8dd3a , build time : Thu, 01 Aug 2019 03:15:26 UTC

expat-devel-2.2.4-2.ph2.x86_64.rpm | size : 24K , sha256 : f7232cfcace3ca428d4f114b257f772c99641cffd566b296dd8682ed106d6284 , build time : Thu, 01 Aug 2019 03:15:26 UTC

expat-libs-2.2.4-2.ph2.x86_64.rpm | size : 76K , sha256 : 7747f6fceb24157d714f785de68425d1d7ffd78e561f344978745981691a9cd1 , build time : Thu, 01 Aug 2019 03:15:26 UTC

unzip-6.0-14.ph2.x86_64.rpm | size : 136K , sha256 : 17ceaddc3c86737d3cc00e4805e426f33c8a7c1431b13f1bd982888f6b834903 , build time : Thu, 01 Aug 2019 03:25:07 UTC

python3-3.6.5-8.ph2.x86_64.rpm | size : 1.1M , sha256 : 385ef38074cdabd50d194f63e321a3a5a81cea165206e7316b1c646eb4f35a3d , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-libs-3.6.5-8.ph2.x86_64.rpm | size : 7.5M , sha256 : eb78f4dacb68b4168bc1cf8bf98cee85ae7631ecea8a557a2c62fadb4690c716 , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-xml-3.6.5-8.ph2.x86_64.rpm | size : 96K , sha256 : b5f592b083f1b1135316a0841c66a9bb9328a6cc305c6e5326f844de70916ffb , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-curses-3.6.5-8.ph2.x86_64.rpm | size : 56K , sha256 : 90c373b0dcbe38719239f31a00455f32f4f72105926967a6834894c06f8e590a , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-devel-3.6.5-8.ph2.x86_64.rpm | size : 176K , sha256 : c08ce7d249bb0b8a95bcd9fd296ce8f672ded1c1aa02dac2ac5e790d9774bcef , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-tools-3.6.5-8.ph2.x86_64.rpm | size : 168K , sha256 : 3e5d5faaad46695a7802d10c32ae87aa44ebdb6dc45972271f2b883e058e7286 , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-setuptools-3.6.5-8.ph2.noarch.rpm | size : 548K , sha256 : f2da6cd2b3608c5d447735641c0e9def0375bdb1072ff9bbbc9777978178cdf0 , build time : Thu, 01 Aug 2019 03:18:11 UTC

python3-test-3.6.5-8.ph2.x86_64.rpm | size : 3.4M , sha256 : edca29b9c42656830438c797bae284c7213ecfc9056e799adc32b5738cee8104 , build time : Thu, 01 Aug 2019 03:18:11 UTC

curl-7.59.0-8.ph2.x86_64.rpm | size : 180K , sha256 : 661a812718fd5992e77e336de56dd607447ad58c01121b751d2491fa6f1afe0f , build time : Thu, 01 Aug 2019 03:26:21 UTC

curl-devel-7.59.0-8.ph2.x86_64.rpm | size : 660K , sha256 : ecdba56215d65f1fa0a608206cee2b697c66a1ca821e4c31111aed3e97562b6e , build time : Thu, 01 Aug 2019 03:26:21 UTC

curl-libs-7.59.0-8.ph2.x86_64.rpm | size : 260K , sha256 : c2dff88c8a2688c63deb7f53bb04074e6ae61909b426dce0384fab6971191711 , build time : Thu, 01 Aug 2019 03:26:21 UTC

apache-tomcat-8.5.40-2.ph2.noarch.rpm | size : 7.4M , sha256 : caa6bb03ca3d35fead4e5d1aa408d0b1d42feceaff249a4a35c1f138922237fe , build time : Thu, 01 Aug 2019 03:39:14 UTC

libxslt-1.1.29-6.ph2.x86_64.rpm | size : 176K , sha256 : 8adfcd1bb9d198cf9db0c7c33234cbd14024aaaca6da9bea630d2cb2c7ab335d , build time : Thu, 01 Aug 2019 03:25:21 UTC

libxslt-devel-1.1.29-6.ph2.x86_64.rpm | size : 340K , sha256 : adde1ed4fea331eae37c3a63d83fb3bd312a7d22bb6c35ffc5e7aad0669824f3 , build time : Thu, 01 Aug 2019 03:25:21 UTC