Security Update 3.0 24

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2019-3.0-0024

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2019-07-29

Affected Release: 3.0

Details

Updates of ['unzip', 'gnupg', 'python2', 'glib', 'systemd', 'zeromq', 'ntp', 'oniguruma', 'libxml2', 'libxslt', 'apache-tomcat', 'redis'] packages of Photon OS have been released.

Affected Packages

Critical

zeromq - ['CVE-2019-13132']

oniguruma - ['CVE-2019-13224']

Important

gnupg - ['CVE-2019-13050', 'CVE-2018-1000858']

glib - ['CVE-2019-13012']

systemd - ['CVE-2019-3844', 'CVE-2019-3843']

ntp - ['CVE-2019-8936']

apache-tomcat - ['CVE-2019-10072']

redis - ['CVE-2019-10192', 'CVE-2019-10193']

Moderate

python2 - ['CVE-2018-20852']

systemd - ['CVE-2019-6454']

libxml2 - ['CVE-2018-9251']

libxslt - ['CVE-2019-13117', 'CVE-2019-13118']

Low

unzip - ['CVE-2019-13232']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['systemd'] after updating, a reboot is required for taking effect.

Updated Packages Information

unzip-6.0-13.ph3.x86_64.rpm | size : 132K , sha256 : a5300feb751b60c00f4369a563c5dab9911d81b1de4a3d03eb064b32b13ae8e2 , build time : Mon, 29 Jul 2019 19:10:59 UTC

unzip-debuginfo-6.0-13.ph3.x86_64.rpm | size : 488K , sha256 : 454c5b8ef2df727542e92e0435ce9c32b78af7b79c742d01d03a30cf2bacc126 , build time : Mon, 29 Jul 2019 19:10:59 UTC

gnupg-2.2.17-1.ph3.x86_64.rpm | size : 4.0M , sha256 : 44992b6ad4bd38f6a700615101c648bb86b07dbd490c7b23165c2165b2224a12 , build time : Mon, 29 Jul 2019 19:11:56 UTC

gnupg-debuginfo-2.2.17-1.ph3.x86_64.rpm | size : 8.1M , sha256 : 29bd5de2e41914b31ecdb38365fdc8cb578f4eee231933824bf2c885fb6aae92 , build time : Mon, 29 Jul 2019 19:11:56 UTC

python2-2.7.15-9.ph3.x86_64.rpm | size : 764K , sha256 : eebbb442fd48c8eb01a2c0e31856683a0d5f4d2049989075ea76cd7391e16b70 , build time : Mon, 29 Jul 2019 19:10:22 UTC

python2-debuginfo-2.7.15-9.ph3.x86_64.rpm | size : 6.0M , sha256 : 1a786e10dd41d9422d4c391a516606e90d75337ee3e0326d01d8ab151e29129a , build time : Mon, 29 Jul 2019 19:10:22 UTC

python2-devel-2.7.15-9.ph3.x86_64.rpm | size : 1.1M , sha256 : 790ca653ea3513059d3545cfcddbcd74298c6af65872f7920db185278e6edca9 , build time : Mon, 29 Jul 2019 19:10:22 UTC

python2-libs-2.7.15-9.ph3.x86_64.rpm | size : 5.7M , sha256 : 72891741797d783817cbe2df33ffca4cd930d0d7047df260545e5397e376bdd3 , build time : Mon, 29 Jul 2019 19:10:22 UTC

python2-test-2.7.15-9.ph3.x86_64.rpm | size : 2.6M , sha256 : bbac3768e2b88de6be09b47953ed46c23f9f2a55537de9f7f407ff73df0d4984 , build time : Mon, 29 Jul 2019 19:10:22 UTC

python2-tools-2.7.15-9.ph3.x86_64.rpm | size : 12K , sha256 : b56a7a1f8f0c7e0c86659f081ad98a805307e9ce0a04c664a295619fa7080be0 , build time : Mon, 29 Jul 2019 19:10:22 UTC

glib-2.58.0-4.ph3.x86_64.rpm | size : 1.3M , sha256 : 775e984020d8456c1a20e207143d5117120aa4b2a00a578f9542adbaefd0f930 , build time : Mon, 29 Jul 2019 19:12:51 UTC

glib-debuginfo-2.58.0-4.ph3.x86_64.rpm | size : 6.3M , sha256 : 1b60d0f5fec07f42c19c105762be7e66bef14e7218f4b22eb1f90b59dbfe350d , build time : Mon, 29 Jul 2019 19:12:51 UTC

glib-devel-2.58.0-4.ph3.x86_64.rpm | size : 3.1M , sha256 : 196f3987b1f826dccab5dfb45661f55c6d9651d4f9fac9c13c0b38ce2565f895 , build time : Mon, 29 Jul 2019 19:12:51 UTC

glib-schemas-2.58.0-4.ph3.x86_64.rpm | size : 40K , sha256 : c36afe3f4a48b0d67a0167c8064ded57c6773f2af56e460bc469fecc782cda21 , build time : Mon, 29 Jul 2019 19:12:51 UTC

systemd-239-12.ph3.x86_64.rpm | size : 6.4M , sha256 : 6c3109c181946e4fa523d20f1877ce1b8858cbd792aeab2097ea658d99b46af3 , build time : Mon, 29 Jul 2019 19:15:58 UTC

systemd-debuginfo-239-12.ph3.x86_64.rpm | size : 616K , sha256 : 668a01a7e701bead9457a58a07e01950917e5a90b3046276061bc990b41c8ded , build time : Mon, 29 Jul 2019 19:15:58 UTC

systemd-devel-239-12.ph3.x86_64.rpm | size : 296K , sha256 : 9e296cffdfd3dba0901b348f16230b589f36c6b788ac85dc9c5101d28056c4cc , build time : Mon, 29 Jul 2019 19:15:58 UTC

systemd-lang-239-12.ph3.x86_64.rpm | size : 96K , sha256 : 7e78d50215076c8e1de6e040c14d7e4fd2bb872e9f70e149ede90fddf54dd483 , build time : Mon, 29 Jul 2019 19:15:58 UTC

zeromq-4.2.3-2.ph3.x86_64.rpm | size : 308K , sha256 : fff31654e0ba8b036fe5f15511f28f676fe3ae53beee586480b48673a1cc552a , build time : Mon, 29 Jul 2019 19:11:34 UTC

zeromq-debuginfo-4.2.3-2.ph3.x86_64.rpm | size : 3.3M , sha256 : c74eb007e79c1b1f0f3c34f7ee145032e5c4ba67ea12069c766897f2ecade537 , build time : Mon, 29 Jul 2019 19:11:34 UTC

zeromq-devel-4.2.3-2.ph3.x86_64.rpm | size : 144K , sha256 : 3d53e7890866d05bf88e64ed17009d6ff99db3a643f0b57868f3889505434d4a , build time : Mon, 29 Jul 2019 19:11:34 UTC

ntp-4.2.8p13-1.ph3.x86_64.rpm | size : 3.5M , sha256 : 89ffea09cdb422f0b716a4b1eabc7653cb90ce3143961a5afecbd2d2e81f3dd9 , build time : Mon, 29 Jul 2019 19:28:17 UTC

ntp-debuginfo-4.2.8p13-1.ph3.x86_64.rpm | size : 4.2M , sha256 : 917c6b53ecaa32699fe8eb341c2f55537c62fedfdce2df56cfc3476928ed10dd , build time : Mon, 29 Jul 2019 19:28:17 UTC

ntp-perl-4.2.8p13-1.ph3.x86_64.rpm | size : 28K , sha256 : 3b3bc7266cd1961e4da9697358d73be7ff02478ce5d047986aaa2acc8fece25b , build time : Mon, 29 Jul 2019 19:28:17 UTC

oniguruma-6.9.0-2.ph3.x86_64.rpm | size : 188K , sha256 : 4bf0da29d73539b7aeedbd07dab0927517c5b16d379bd7b72e02d92a1585f17e , build time : Mon, 29 Jul 2019 19:11:34 UTC

oniguruma-debuginfo-6.9.0-2.ph3.x86_64.rpm | size : 592K , sha256 : a9a51a16368278b07b53c95b5002a28b4a29b31c803eeecaad4d5cc0e02e395c , build time : Mon, 29 Jul 2019 19:11:34 UTC

oniguruma-devel-6.9.0-2.ph3.x86_64.rpm | size : 32K , sha256 : f75bd1d1a49656d4cc21f247a1acfa71e7e47ca25ce4cbececeeb1b946572a5f , build time : Mon, 29 Jul 2019 19:11:34 UTC

libxml2-2.9.9-1.ph3.x86_64.rpm | size : 1.6M , sha256 : 75697f4dfd2d214e8346928fdd5058de2d95dce75437b6a8d23060005c0b2cfd , build time : Mon, 29 Jul 2019 19:12:00 UTC

libxml2-debuginfo-2.9.9-1.ph3.x86_64.rpm | size : 2.9M , sha256 : c71c33ddfe423830f5d7c7d4331801e7ef9b299e3a1e5ecb2977049cc4b75ec0 , build time : Mon, 29 Jul 2019 19:12:00 UTC

libxml2-devel-2.9.9-1.ph3.x86_64.rpm | size : 96K , sha256 : 63605cf6036eef5f761c0f7cc3b6ae63e75b0e9623d786c1ea41b14358d1faf4 , build time : Mon, 29 Jul 2019 19:12:00 UTC

libxml2-python-2.9.9-1.ph3.x86_64.rpm | size : 184K , sha256 : 1bb8b5c76abf0802dfed8549b61076ad0b44986f0fa49e7d4c2e061e840b5907 , build time : Mon, 29 Jul 2019 19:12:00 UTC

libxslt-1.1.32-4.ph3.x86_64.rpm | size : 172K , sha256 : 748eeee1f2c377fcaf2a53644d83bea7e8d01fe7eddb788f44a7b8883806409b , build time : Mon, 29 Jul 2019 19:12:28 UTC

libxslt-debuginfo-1.1.32-4.ph3.x86_64.rpm | size : 696K , sha256 : b6e2a6b84a625d45416d3cff5a57a90aad7ba926287e137cbe580365587424e2 , build time : Mon, 29 Jul 2019 19:12:28 UTC

libxslt-devel-1.1.32-4.ph3.x86_64.rpm | size : 348K , sha256 : 375f756dc250e5ae1228717777ce45ba4e8d306ba0123cfa72bd1ca14fc185c5 , build time : Mon, 29 Jul 2019 19:12:28 UTC

apache-tomcat-8.5.40-2.ph3.noarch.rpm | size : 7.4M , sha256 : ee3a6e07ccf9f5038f96de276fe259d2fd97ac0758b79d3db53f443a03e17a61 , build time : Mon, 29 Jul 2019 19:22:29 UTC

redis-5.0.5-1.ph3.x86_64.rpm | size : 2.9M , sha256 : ebb3cf2f63a0f8b6f77b044041182ade7f0f4fba1d5a061878676e94a037fa18 , build time : Mon, 29 Jul 2019 19:19:44 UTC

redis-debuginfo-5.0.5-1.ph3.x86_64.rpm | size : 9.0M , sha256 : 77f7ed3acb8bbd354a97f5ba6979466484dae514485a7b769a4f2ff61267691b , build time : Mon, 29 Jul 2019 19:19:44 UTC