Security Updates 1.0 264

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2020-1.0-0264
Type : Security
Severity : {'Important', 'Low', 'Critical'}
Issued on : 2020-01-15
Affected Versions : Photon OS 1.0

Details

An update of {'openssl', 'apache-tomcat', 'sqlite-autoconf', 'yarn', 'dbus', 'go', 'kubernetes', 'sudo'} packages of Photon OS has been released.

Affected Packages:

Critical

sqlite-autoconf - ['CVE-2019-19317', 'CVE-2019-19603', 'CVE-2019-19646', 'CVE-2019-20218']
apache-tomcat - ['CVE-2019-17563']

Important

sudo - ['CVE-2019-19234', 'CVE-2019-19232']
apache-tomcat - ['CVE-2019-12418']
sqlite-autoconf - ['CVE-2019-19880']
dbus - ['CVE-2019-12749']
go - ['CVE-2019-16276', 'CVE-2019-17596']
kubernetes - ['CVE-2019-11253']
yarn - ['CVE-2019-10773']

Moderate

openssl - ['CVE-2019-1551']
sqlite-autoconf - ['CVE-2019-19645']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

openssl-devel-1.0.2u-1.ph1.x86_64.rpm , sha256 : 7d5824b37580985d9cd76199f32a7e549ce3f31bcf4272dfcdcca62da90681e4 , size : 3.0M , build_date : Wed, 15 Jan 2020 02:50:09 UTC
openssl-perl-1.0.2u-1.ph1.x86_64.rpm , sha256 : 0c765c995e798258b62d7f67b1dbeac5ad0a6b368d1fdd83cbd0285cad63ff5e , size : 14K , build_date : Wed, 15 Jan 2020 02:50:09 UTC
openssl-1.0.2u-1.ph1.x86_64.rpm , sha256 : d2cb405d83b8bfdf4775d5605c64ca0a4da227ea38f85f5b1fcf8598e64a42a2 , size : 3.0M , build_date : Wed, 15 Jan 2020 02:50:09 UTC
openssl-c_rehash-1.0.2u-1.ph1.x86_64.rpm , sha256 : 052aff6ad16d89a7814dd81b96cdb7bba64c119bff014d45d75aefae72deca46 , size : 11K , build_date : Wed, 15 Jan 2020 02:50:09 UTC
apache-tomcat-8.5.50-1.ph1.noarch.rpm , sha256 : d46d58b6203147e0dce20d1631ed64fabd8471bb2efe5e2f5897985244a04f08 , size : 8.0M , build_date : Wed, 15 Jan 2020 02:52:08 UTC
sqlite-autoconf-3.30.1-2.ph1.x86_64.rpm , sha256 : a9e19b4242525fd81e0e8f4cb2feaf1054335ab51214ed540196c891dd486975 , size : 1.5M , build_date : Wed, 15 Jan 2020 02:46:12 UTC
yarn-1.10.1-4.ph1.x86_64.rpm , sha256 : e771049633da65268dc43a5ddc9a67d594da7ecdf30f7b5353a367c7a805f771 , size : 32M , build_date : Wed, 15 Jan 2020 03:01:39 UTC
dbus-devel-1.13.6-2.ph1.x86_64.rpm , sha256 : a91a741ac2a09eaf634032ef5411b14d41080661fa482574c1ad4e049deaefac , size : 217K , build_date : Wed, 15 Jan 2020 02:52:33 UTC
dbus-1.13.6-2.ph1.x86_64.rpm , sha256 : af2f41111cff692a762cfb04090e722e30f12fa815029d8bf454a53b432928f4 , size : 682K , build_date : Wed, 15 Jan 2020 02:52:33 UTC
go-1.11.13-3.ph1.x86_64.rpm , sha256 : 1efe4c072a5542e37252b140be006e5698425b8c3e619a1dcdfd1d967cb5803a , size : 149M , build_date : Wed, 15 Jan 2020 02:58:04 UTC
kubernetes-dashboard-1.8.3-4.ph1.x86_64.rpm , sha256 : 32a5d8983a75c8a5f65f7114ab36c429ed43927c946eea88aecb93d080f5bd30 , size : 37M , build_date : Wed, 15 Jan 2020 03:09:02 UTC
kubernetes-pause-1.13.12-1.ph1.x86_64.rpm , sha256 : 244e00001f099061d8a59bdc68b6aba629dba6edb87ed9470f77ef44fd319e01 , size : 316K , build_date : Wed, 15 Jan 2020 03:19:26 UTC
kubernetes-1.13.12-1.ph1.x86_64.rpm , sha256 : 0ad696c37eb6c1ac02c516c46c10ef5ae177eb817ba7df40fec6e3ec2b3c3c12 , size : 182M , build_date : Wed, 15 Jan 2020 03:19:26 UTC
kubernetes-kubeadm-1.13.12-1.ph1.x86_64.rpm , sha256 : 3aba89c3dcd18f71b5efbe7171df3d6411740e22c7908f64bda088a29a9a19e9 , size : 11M , build_date : Wed, 15 Jan 2020 03:19:26 UTC
kubernetes-kubectl-extras-1.13.12-1.ph1.x86_64.rpm , sha256 : d6805d066a00d00d0fc05d483a11371765594451a811dfc316f58d9547ef3c4a , size : 35M , build_date : Wed, 15 Jan 2020 03:19:26 UTC
kubernetes-dns-1.14.8-3.ph1.x86_64.rpm , sha256 : d4909855ca573a1309abcc933fa72d62bf51089471aec1c95e01b712cf5cecd1 , size : 29M , build_date : Wed, 15 Jan 2020 03:04:30 UTC
sudo-1.8.30-1.ph1.x86_64.rpm , sha256 : 3a82a1f6d453615a299a9bafe5aeb829af400dd06366feced5eb0ae3b320bd94 , size : 1.4M , build_date : Wed, 15 Jan 2020 02:52:42 UTC