Security Update 3.0 82

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2020-3.0-0082

Type : Security

Severity : ['Important', 'Moderate', 'Low']

Issue date : 2020-04-22

Affected Release: 3.0

Details

Updates of ['linux-aws', 'linux-esx', 'mysql', 'nxtgn-openssl', 'linux-secure', 'linux'] packages of Photon OS have been released.

Affected Packages

Important

linux-aws - ['CVE-2020-11668', 'CVE-2020-12657', 'CVE-2020-14381']

linux-esx - ['CVE-2020-11668', 'CVE-2020-12657', 'CVE-2020-14381']

nxtgn-openssl - ['CVE-2020-1967']

linux-secure - ['CVE-2020-11668', 'CVE-2020-12657']

linux - ['CVE-2020-11668', 'CVE-2020-12657', 'CVE-2020-14381']

Moderate

linux-aws - ['CVE-2020-11609', 'CVE-2020-11565', 'CVE-2020-11494', 'CVE-2020-11608']

linux-esx - ['CVE-2020-11609', 'CVE-2020-11565', 'CVE-2020-11494', 'CVE-2020-11608']

mysql - ['CVE-2019-2967', 'CVE-2020-2765', 'CVE-2019-3011', 'CVE-2019-2998', 'CVE-2019-3004', 'CVE-2020-2589', 'CVE-2020-2903', 'CVE-2020-2926', 'CVE-2020-2573', 'CVE-2019-2957', 'CVE-2020-2930', 'CVE-2020-2892', 'CVE-2020-2761', 'CVE-2020-2921', 'CVE-2020-2780', 'CVE-2020-2896', 'CVE-2020-2804', 'CVE-2020-2895', 'CVE-2020-2768', 'CVE-2020-2901', 'CVE-2019-2982', 'CVE-2019-2946', 'CVE-2019-2966', 'CVE-2020-2574', 'CVE-2020-2779', 'CVE-2020-2814', 'CVE-2019-2991', 'CVE-2020-2923', 'CVE-2019-2938', 'CVE-2020-2893', 'CVE-2020-2763', 'CVE-2020-2762', 'CVE-2020-2580', 'CVE-2020-2584', 'CVE-2020-2812', 'CVE-2020-2759', 'CVE-2020-2752', 'CVE-2020-2686', 'CVE-2020-2627', 'CVE-2019-2963', 'CVE-2020-2679', 'CVE-2019-2997', 'CVE-2019-2960', 'CVE-2020-2570', 'CVE-2020-2770', 'CVE-2020-2924', 'CVE-2019-2914', 'CVE-2020-2660', 'CVE-2020-2774', 'CVE-2020-2853', 'CVE-2020-2760', 'CVE-2020-2898', 'CVE-2020-2588', 'CVE-2020-2925', 'CVE-2019-3009', 'CVE-2020-2897', 'CVE-2020-2579', 'CVE-2020-2577', 'CVE-2019-2974', 'CVE-2020-2928', 'CVE-2019-2920', 'CVE-2019-3018', 'CVE-2019-2968', 'CVE-2019-2993', 'CVE-2020-2904']

linux-secure - ['CVE-2020-11609', 'CVE-2020-11565', 'CVE-2020-11494', 'CVE-2020-11608']

linux - ['CVE-2020-11609', 'CVE-2020-11565', 'CVE-2020-11494', 'CVE-2020-11608']

Low

mysql - ['CVE-2020-2922', 'CVE-2019-2911', 'CVE-2019-2791', 'CVE-2020-2572', 'CVE-2020-2694']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux-aws', 'linux-esx', 'linux-secure', 'linux'] after updating, a reboot is required for taking effect.

Updated Packages Information

linux-aws-4.19.115-1.ph3.x86_64.rpm | size : 17M , sha256 : c0f055ccb053bce99d3818c7c71f4d5f3d7cca5718c9b10ba6c5248cc2c96494 , build time : Tue, 21 Apr 2020 19:39:15 UTC

linux-aws-debuginfo-4.19.115-1.ph3.x86_64.rpm | size : 468M , sha256 : 027667ae2703538060b55d69b7a87097f2e29a64c2cfafd2cfea715b5e7533e6 , build time : Tue, 21 Apr 2020 19:39:15 UTC

linux-aws-devel-4.19.115-1.ph3.x86_64.rpm | size : 16M , sha256 : 0c13afa3885cdb0bd869cd6cc515316a5790da56856ed72fbb2c26e71f22e8d3 , build time : Tue, 21 Apr 2020 19:39:15 UTC

linux-aws-docs-4.19.115-1.ph3.x86_64.rpm | size : 8.2M , sha256 : 43cc9ee35acbfb7ee67df4b6d44e2d3ddc11c847a927d75ebd1622871c2ccc3e , build time : Tue, 21 Apr 2020 19:39:15 UTC

linux-aws-drivers-gpu-4.19.115-1.ph3.x86_64.rpm | size : 1.5M , sha256 : 9f2b8dbfc731fd9df95eb00717e3253212c4b7eb594b69bd7df3b00e115c7cc1 , build time : Tue, 21 Apr 2020 19:39:15 UTC

linux-aws-hmacgen-4.19.115-1.ph3.x86_64.rpm | size : 20K , sha256 : 5b46dfe89f55087aff9db949d866c28b31c107454e3b4f4ad9f3f4a3e6af239a , build time : Tue, 21 Apr 2020 19:39:15 UTC

linux-aws-oprofile-4.19.115-1.ph3.x86_64.rpm | size : 36K , sha256 : d73832ea914cd1197e8c346926072889585e43947b2db6d8ee12c146b8cf1b78 , build time : Tue, 21 Apr 2020 19:39:15 UTC

linux-aws-sound-4.19.115-1.ph3.x86_64.rpm | size : 240K , sha256 : d7743ad881b6e7e76f403c09430acf1cd83cdfe83126dd82bae53aa0bb76784a , build time : Tue, 21 Apr 2020 19:39:15 UTC

linux-esx-4.19.115-1.ph3.x86_64.rpm | size : 9.8M , sha256 : 6758688051b0e6389a1106c2b8da34d8d1fb7ef2a30693a6c2f52a879ebf46a2 , build time : Tue, 21 Apr 2020 20:56:23 UTC

linux-esx-debuginfo-4.19.115-1.ph3.x86_64.rpm | size : 248M , sha256 : bb68cf78a9f45f017b44cca944e03c6b50668251e6e55b5ca8c72bc4ac47e340 , build time : Tue, 21 Apr 2020 19:33:41 UTC

linux-esx-devel-4.19.115-1.ph3.x86_64.rpm | size : 12M , sha256 : 76f714ca3f90443df435c1af1e060689b4e2ef3c03fe19f4bd4d796d39175a4b , build time : Tue, 21 Apr 2020 19:33:41 UTC

linux-esx-docs-4.19.115-1.ph3.x86_64.rpm | size : 8.2M , sha256 : c2fecd54b22e848f2694f99131083fc8f068a3abd036c2b34430fb696be2fca0 , build time : Tue, 21 Apr 2020 19:33:41 UTC

linux-esx-hmacgen-4.19.115-1.ph3.x86_64.rpm | size : 32K , sha256 : a970f54829a2b2b2fae0f0143ab97e0a66c4d48d3f5d4e368bda0424482fed42 , build time : Tue, 21 Apr 2020 19:33:41 UTC

mysql-8.0.19-1.ph3.x86_64.rpm | size : 64M , sha256 : 8eb753dd4d9b993feca41c62612965c3e2f05f1cad738394a661965c195f8405 , build time : Tue, 21 Apr 2020 19:38:59 UTC

mysql-debuginfo-8.0.19-1.ph3.x86_64.rpm | size : 3.1M , sha256 : 5684f7f1fb20309ce199aef5495add909639ba30a25875a3e89d740cd2ee8e2d , build time : Tue, 21 Apr 2020 19:38:59 UTC

mysql-devel-8.0.19-1.ph3.x86_64.rpm | size : 2.6M , sha256 : c7f2be9bea254d0ce7116bf40853b5ba4aa9496e9d71c09bd81513c96ea6a935 , build time : Tue, 21 Apr 2020 19:38:59 UTC

nxtgn-openssl-1.1.1d-3.ph3.x86_64.rpm | size : 1.9M , sha256 : 5ee682dde86a4ed3bef69911ce2a4273875573a444aa4ff2b553661e06d040e5 , build time : Tue, 21 Apr 2020 19:21:11 UTC

nxtgn-openssl-c_rehash-1.1.1d-3.ph3.x86_64.rpm | size : 16K , sha256 : 607f4a6f79892358e9fbbfa942e1f4829ffc3033a3ef94fa11620667620e692b , build time : Tue, 21 Apr 2020 19:21:11 UTC

nxtgn-openssl-debuginfo-1.1.1d-3.ph3.x86_64.rpm | size : 6.6M , sha256 : f609b82f104b1b886ccbad9f0ff7e23f21ae58084acff6cec24127a2e71a3aef , build time : Tue, 21 Apr 2020 19:21:11 UTC

nxtgn-openssl-devel-1.1.1d-3.ph3.x86_64.rpm | size : 2.1M , sha256 : 9df5c3dba05b5b9496a43fccf85e30919063fefff1198db7f61e3bdbbf2d0b50 , build time : Tue, 21 Apr 2020 19:21:11 UTC

nxtgn-openssl-perl-1.1.1d-3.ph3.x86_64.rpm | size : 16K , sha256 : 8e46bdcb2ef232b6d5f3ca24d64218653aaec60f939cb16f47d30b31a7dfe2e2 , build time : Tue, 21 Apr 2020 19:21:11 UTC

linux-secure-4.19.115-1.ph3.x86_64.rpm | size : 23M , sha256 : c77caae972ca6e586621df36d6fa5a41aa2b4ff80810f3f70d3e255f85f683d8 , build time : Tue, 21 Apr 2020 20:57:19 UTC

linux-secure-debuginfo-4.19.115-1.ph3.x86_64.rpm | size : 204M , sha256 : 305c2b75d3a94170d31f3f0095d90484679bef0929daee07432e81eb920095d0 , build time : Tue, 21 Apr 2020 19:37:31 UTC

linux-secure-devel-4.19.115-1.ph3.x86_64.rpm | size : 13M , sha256 : 26a844b4587f8e3820ce527a32e3147ec235f0f242e339590d00016be9a7b26f , build time : Tue, 21 Apr 2020 19:37:31 UTC

linux-secure-docs-4.19.115-1.ph3.x86_64.rpm | size : 8.2M , sha256 : e916fccc6ab6249b3fa5324a7fc43ce30dd2996ae1a5c715e247da4b41910a0b , build time : Tue, 21 Apr 2020 19:37:31 UTC

linux-secure-hmacgen-4.19.115-1.ph3.x86_64.rpm | size : 24K , sha256 : 3c49c2f8dcc2810bd1e3ce897523e8c08141049ba8606e0f41809b27781afaac , build time : Tue, 21 Apr 2020 19:37:31 UTC

linux-secure-lkcm-4.19.115-1.ph3.x86_64.rpm | size : 28K , sha256 : 772ea274f42837f62e629162e310955269787335968d90e704d1abd9dfa29e81 , build time : Tue, 21 Apr 2020 19:37:31 UTC

linux-4.19.115-1.ph3.x86_64.rpm | size : 22M , sha256 : 5e7b3f0c2871730c1952876076a579ecb833613ff8775bdaf92e0bb5d109e9f8 , build time : Tue, 21 Apr 2020 20:56:34 UTC

linux-api-headers-4.19.115-1.ph3.noarch.rpm | size : 1.4M , sha256 : 81eec811690fe6e167afef60c6277bbc5792055f6a9524db3432e52b4e33aa13 , build time : Tue, 21 Apr 2020 18:51:45 UTC