Security Updates 2 288

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2020-2.0-0288
Type : Security
Severity : ['Critical', 'Important', 'Moderate']
Issued on : 2020-10-10
Affected Versions : Photon OS 2.0

Details

An update of {'icu', 'linux-secure', 'linux', 'gnutls', 'nodejs', 'linux-aws', 'linux-esx'} packages of Photon OS has been released.

Affected Packages:

Critical

nodejs - ['CVE-2020-8252']
icu - ['CVE-2016-0494', 'CVE-2017-14952', 'CVE-2015-4844', 'CVE-2017-17484', 'CVE-2016-7415', 'CVE-2016-6293']

Important

linux-secure - ['CVE-2020-25220', 'CVE-2020-25285', 'CVE-2020-25212']
linux - ['CVE-2020-25220', 'CVE-2020-25285', 'CVE-2020-25212']
gnutls - ['CVE-2020-24659']
linux-aws - ['CVE-2020-25220', 'CVE-2020-25285', 'CVE-2020-25212']
linux-esx - ['CVE-2020-25220', 'CVE-2020-25285', 'CVE-2020-25212']

Moderate

linux-aws - ['CVE-2020-12771', 'CVE-2020-14390', 'CVE-2020-12888']
linux-esx - ['CVE-2020-12771', 'CVE-2020-14390', 'CVE-2020-12888']
linux - ['CVE-2020-12771', 'CVE-2020-14390', 'CVE-2020-12888']
linux-secure - ['CVE-2020-12771', 'CVE-2020-14390', 'CVE-2020-12888']

Solution

Update the affected packages (tdnf update package)
Note: For packages ['linux-secure', 'linux', 'linux-aws', 'linux-esx'] after updating, a reboot is required for taking effect.

Updated Packages Information

linux-api-headers-4.9.237-1.ph2.noarch.rpm , sha256 : 7c417412bb48a571a1b9d0800976af0d51fb4618144ab0946e41a78cd2159237 , size : 1.2M , build_date : Sat, 10 Oct 2020 02:47:57 UTC
gnutls-3.6.15-1.ph2.x86_64.rpm , sha256 : 9f466d46f9479ae2da3b389bb1ce25edc12642c682024139fa9b1b58703003ee , size : 1.6M , build_date : Sat, 10 Oct 2020 03:09:15 UTC
gnutls-devel-3.6.15-1.ph2.x86_64.rpm , sha256 : 8f90d7c1f7f0404d5cf5d3aff5b2e8535df5351f97276cd106814a1aad06cb3a , size : 1.2M , build_date : Sat, 10 Oct 2020 03:09:15 UTC
icu-67.1-1.ph2.x86_64.rpm , sha256 : 5c45bfe0770cf2e750c45cf4a6c32527c7d9ac6216ce1a5b4f725344cbc1c669 , size : 14M , build_date : Sat, 10 Oct 2020 02:57:26 UTC
icu-devel-67.1-1.ph2.x86_64.rpm , sha256 : 4ad0690a9afde3b1832dcdc0f63cc2488a4940477134316286347c2e2f84e2ce , size : 951K , build_date : Sat, 10 Oct 2020 02:57:26 UTC
linux-4.9.237-2.ph2.x86_64.rpm , sha256 : b28ba4423d9ce4143ccca9c932cecdd71373f6e625e5f9c7b44b946a7468ba71 , size : 20M , build_date : Sat, 10 Oct 2020 05:54:48 UTC
linux-aws-4.9.237-2.ph2.x86_64.rpm , sha256 : b50463694620b9d83381d37029e543cbc172ab46570d5aae5255fecf4b39789e , size : 18M , build_date : Sat, 10 Oct 2020 03:32:11 UTC
linux-aws-devel-4.9.237-2.ph2.x86_64.rpm , sha256 : f71de794e4f414cf5d015af476a2576a8a5afce9c30b98e5534fd238464a27b7 , size : 11M , build_date : Sat, 10 Oct 2020 03:32:11 UTC
linux-aws-docs-4.9.237-2.ph2.x86_64.rpm , sha256 : c17ed3f5717536a3065a83b0c761d70194234ec86aaf5317eb64b39fea04a6cd , size : 7.3M , build_date : Sat, 10 Oct 2020 03:32:11 UTC
linux-aws-drivers-gpu-4.9.237-2.ph2.x86_64.rpm , sha256 : c23e47ba293fda5a367f3f3d3f8e0ec611607087e47194972fe182ee4f7ff71a , size : 1.5M , build_date : Sat, 10 Oct 2020 03:32:11 UTC
linux-aws-oprofile-4.9.237-2.ph2.x86_64.rpm , sha256 : 7f45e93726a10ddd575fc956b074b40230217cbdb24406fb78ea86c3259624d1 , size : 39K , build_date : Sat, 10 Oct 2020 03:32:11 UTC
linux-aws-sound-4.9.237-2.ph2.x86_64.rpm , sha256 : c6922dff8265be1186baaddc0d19d67f63a8e5b67d72b2077b98923012020787 , size : 266K , build_date : Sat, 10 Oct 2020 03:32:11 UTC
linux-devel-4.9.237-2.ph2.x86_64.rpm , sha256 : bf144930473871b23a8ee48971f4e7713c0f3c4d486d12f08d68444518e5048d , size : 11M , build_date : Sat, 10 Oct 2020 03:33:08 UTC
linux-docs-4.9.237-2.ph2.x86_64.rpm , sha256 : 163e7abd6ccb887b1ccea9403850a7a8dc716676dca3eb7c0d23393227245ca4 , size : 7.3M , build_date : Sat, 10 Oct 2020 03:33:08 UTC
linux-drivers-gpu-4.9.237-2.ph2.x86_64.rpm , sha256 : 1caa365e511a36885f2a5777c85153a66dbb02a3fc09df1f456749d73d510d2c , size : 1.5M , build_date : Sat, 10 Oct 2020 03:33:08 UTC
linux-esx-4.9.237-1.ph2.x86_64.rpm , sha256 : 6e0c88e60cceb1959bd9fd5e790096d9cf57ea36f2dc13d20c4f006cb251f3a1 , size : 8.9M , build_date : Sat, 10 Oct 2020 05:54:13 UTC
linux-esx-devel-4.9.237-1.ph2.x86_64.rpm , sha256 : 93d7080efc7391bead0f48ded64d368fd88f281ca71b7a9b647c816bd54ab178 , size : 11M , build_date : Sat, 10 Oct 2020 03:28:19 UTC
linux-esx-docs-4.9.237-1.ph2.x86_64.rpm , sha256 : 5d65cb9890c0e1db54b1224882ee5085f2e89dd47b4cbab0d220852c40c0afcd , size : 7.3M , build_date : Sat, 10 Oct 2020 03:28:19 UTC
linux-oprofile-4.9.237-2.ph2.x86_64.rpm , sha256 : ed4522faf4ec2870d94db88d392e36a623a8b4532fe981d26715467da4836c1c , size : 51K , build_date : Sat, 10 Oct 2020 03:33:08 UTC
linux-secure-4.9.237-1.ph2.x86_64.rpm , sha256 : 345f3019a349f55bd246513f2e52356e22b46a11d8e0959d1a91e86b7261e99a , size : 22M , build_date : Sat, 10 Oct 2020 05:54:04 UTC
linux-secure-devel-4.9.237-1.ph2.x86_64.rpm , sha256 : bb7de4e388509bc40a5dbe5970f0272b264f8beb2e9d0fde60d84ce07ed41f0f , size : 11M , build_date : Sat, 10 Oct 2020 03:29:36 UTC
linux-secure-docs-4.9.237-1.ph2.x86_64.rpm , sha256 : 21f84e84c65cd206dbd9d261c76871990088964ed34d9685f7fbea19c92f62b8 , size : 7.3M , build_date : Sat, 10 Oct 2020 03:29:36 UTC
linux-secure-lkcm-4.9.237-1.ph2.x86_64.rpm , sha256 : 64e7016294a44894d1d7df71212c7768fe20c687ff4254a2c6157bae9bb878d6 , size : 28K , build_date : Sat, 10 Oct 2020 03:29:36 UTC
linux-sound-4.9.237-2.ph2.x86_64.rpm , sha256 : 16fbe1e35ac77e68ebed9bfdba317d3b8c38099360bc48b8cec4cac88a234c21 , size : 273K , build_date : Sat, 10 Oct 2020 03:33:08 UTC
linux-tools-4.9.237-2.ph2.x86_64.rpm , sha256 : 605117af840c7731ccc553975662c698d19995080e13af5e3052715692e46b97 , size : 8.3M , build_date : Sat, 10 Oct 2020 03:33:08 UTC
nodejs-10.22.1-1.ph2.x86_64.rpm , sha256 : 39ba9aa5bc09016672a18106420925d387ffd824e90a81748074ea5713958baf , size : 19M , build_date : Sat, 10 Oct 2020 03:12:59 UTC
nodejs-devel-10.22.1-1.ph2.x86_64.rpm , sha256 : e5d5db4831c52d7b081eca9c2571d2af8223e5ae1563372a2e83e697939ef079 , size : 562K , build_date : Sat, 10 Oct 2020 03:12:59 UTC