Security Updates 1.0 309

[Important] Photon OS Security Update

Summary

Advisory ID : PHSA-2020-1.0-0309
Type : Security
Severity : ['Important', 'Moderate']
Issued on : 2020-07-25
Affected Versions : Photon OS 1.0

Details

An update of {'python3', 'envoy', 'mysql', 'python2', 'bindutils', 'linux-esx', 'linux', 'apache-tomcat'} packages of Photon OS has been released.

Affected Packages:

Important

python3 - ['CVE-2019-20907']
envoy - ['CVE-2020-12603', 'CVE-2020-8663', 'CVE-2020-12605', 'CVE-2020-12604']
python2 - ['CVE-2019-20907']
linux-esx - ['CVE-2020-14305']
linux - ['CVE-2020-14305']
apache-tomcat - ['CVE-2020-13935', 'CVE-2020-13934']

Moderate

python3 - ['CVE-2020-14422']
mysql - ['CVE-2020-14576', 'CVE-2020-14550', 'CVE-2020-14539', 'CVE-2020-14547', 'CVE-2020-14553', 'CVE-2020-14559', 'CVE-2020-14567', 'CVE-2020-14540']
bindutils - ['CVE-2020-8619', 'CVE-2020-8618']
linux-esx - ['CVE-2020-15393', 'CVE-2020-15436']
linux - ['CVE-2020-15393', 'CVE-2020-15436']

Solution

Update the affected packages (tdnf update package)
Note: For packages ['linux-esx', 'linux'] after updating, a reboot is required for taking effect.

Updated Packages Information

apache-tomcat-8.5.51-4.ph1.noarch.rpm , sha256 : 3bc24eda52b678b4ce700db058e46ea2be6a01ad422731d74b629e09c995f848 , size : 8.1M , build_date : Fri, 24 Jul 2020 03:40:14 UTC
linux-api-headers-4.4.230-1.ph1.noarch.rpm , sha256 : af9e9854e07d4bf4a3820160b2b8a0d869ad549178847c4a86a272ff36b1f988 , size : 1.1M , build_date : Fri, 24 Jul 2020 03:03:41 UTC
bindutils-9.16.4-1.ph1.x86_64.rpm , sha256 : 32d1e17dba143e51ea8e09a4bd21d07c037183bdc950513c8926fac2049ee12d , size : 3.4M , build_date : Fri, 24 Jul 2020 03:34:12 UTC
envoy-1.15.0-1.ph1.x86_64.rpm , sha256 : 45cae4ec082b255100740726e0b8aa19328fcaa4a0ddd1e4563205d7fea8f8b3 , size : 26M , build_date : Fri, 24 Jul 2020 04:45:54 UTC
linux-4.4.230-1.ph1.x86_64.rpm , sha256 : 7da3ebf8175d8757267a3f86b385ca1ede00e560a5dc5ff5b25a8690beee2f01 , size : 19M , build_date : Fri, 24 Jul 2020 05:20:55 UTC
linux-dev-4.4.230-1.ph1.x86_64.rpm , sha256 : 31ffee91624430ba9848f8173f3305a2641c3e23f1edd5833addfaf1fe815504 , size : 10M , build_date : Fri, 24 Jul 2020 03:59:15 UTC
linux-docs-4.4.230-1.ph1.x86_64.rpm , sha256 : 74c057f651a8a503a318e380f68999e3fb949e5424620d41ffe297b3849d4013 , size : 6.6M , build_date : Fri, 24 Jul 2020 03:59:15 UTC
linux-drivers-gpu-4.4.230-1.ph1.x86_64.rpm , sha256 : 53d7a771c21fc0539c25e2e48dc342874edc96ba5074257726e61d83b6e9a069 , size : 1.5M , build_date : Fri, 24 Jul 2020 03:59:15 UTC
linux-esx-4.4.230-1.ph1.x86_64.rpm , sha256 : 6fb9f4dcfdc8a80e7fdf8b6fb5ff39879c756a701a2bf2baf9ceec4dccd330f8 , size : 7.7M , build_date : Fri, 24 Jul 2020 05:21:33 UTC
linux-esx-devel-4.4.230-1.ph1.x86_64.rpm , sha256 : 7e1bad7393d2d8fcfb26b3157f129df61de688c00cb4534148d48642de379d37 , size : 9.8M , build_date : Fri, 24 Jul 2020 03:55:23 UTC
linux-esx-docs-4.4.230-1.ph1.x86_64.rpm , sha256 : 20ceb859ba3f13ac144e02904eb231d7709392b84335655899bca20b64367148 , size : 6.6M , build_date : Fri, 24 Jul 2020 03:55:23 UTC
linux-oprofile-4.4.230-1.ph1.x86_64.rpm , sha256 : 398ffbc1c4203c5970e0b04b711170621e9bae4e6d1c77dfb37226ddfdf006e0 , size : 49K , build_date : Fri, 24 Jul 2020 03:59:15 UTC
linux-sound-4.4.230-1.ph1.x86_64.rpm , sha256 : 0f6d1cfb717bd88b4ffe56347e8c0349a1069a71e42d14fc52c2ac375485dbdd , size : 263K , build_date : Fri, 24 Jul 2020 03:59:15 UTC
linux-tools-4.4.230-1.ph1.x86_64.rpm , sha256 : 301e0c7acfb71b838b647364240227133d071f15a4b9c961813acebc31a73647 , size : 832K , build_date : Fri, 24 Jul 2020 03:59:15 UTC
mysql-5.7.31-1.ph1.x86_64.rpm , sha256 : 3b4a6252b3c7e2fd8781c763552f4dbcd852c2809af98ecac8328e51f765ddb2 , size : 47M , build_date : Fri, 24 Jul 2020 03:48:37 UTC
mysql-devel-5.7.31-1.ph1.x86_64.rpm , sha256 : a644f049bd18432735ff7e66689cfe2e8c42302d2e2c8820eec2dbbd4168ba6e , size : 1.7M , build_date : Fri, 24 Jul 2020 03:48:37 UTC
python2-2.7.15-17.ph1.x86_64.rpm , sha256 : 70d8a0945950620950b1185f95476c4e10e1555d1ab284ce0a566a8b6d237b5f , size : 747K , build_date : Fri, 24 Jul 2020 03:27:12 UTC
python2-devel-2.7.15-17.ph1.x86_64.rpm , sha256 : 0b378b24258770114dd557161f066c4fa636f593bbb23018257097c19654746e , size : 1.1M , build_date : Fri, 24 Jul 2020 03:27:12 UTC
python2-libs-2.7.15-17.ph1.x86_64.rpm , sha256 : 1af7036bbd7d5627e7fda317867f09c999fd96a78327f12e3c7de309b9a72595 , size : 5.6M , build_date : Fri, 24 Jul 2020 03:27:12 UTC
python2-tools-2.7.15-17.ph1.x86_64.rpm , sha256 : fbd7651206072d3e07684510e7068f88157d3b8117f2e5c275fcc77612d825d2 , size : 16K , build_date : Fri, 24 Jul 2020 03:27:12 UTC
python3-3.5.6-16.ph1.x86_64.rpm , sha256 : 5e19f789f313f31ae0732aeed243aa6a3119f4e602073330fc7d2507b94d9364 , size : 1.1M , build_date : Fri, 24 Jul 2020 03:28:39 UTC
python3-devel-3.5.6-16.ph1.x86_64.rpm , sha256 : 0a1a21398b31c596b2068c295fa04e4ac499325591b3879d4963974013950df3 , size : 154K , build_date : Fri, 24 Jul 2020 03:28:39 UTC
python3-libs-3.5.6-16.ph1.x86_64.rpm , sha256 : a7fb61fdb0dcb8d25e4dc2d04a8e73a36d0c0c6339152884838c3c09ab341644 , size : 8.8M , build_date : Fri, 24 Jul 2020 03:28:39 UTC
python3-tools-3.5.6-16.ph1.x86_64.rpm , sha256 : f030fb79041db0a7c19b227e28a355e52d35c69a47b8faa8cd2635bd2cae1fa9 , size : 167K , build_date : Fri, 24 Jul 2020 03:28:39 UTC