Security Update 2.0 229

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2020-0229

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2020-04-14

Affected Release: 2.0

Details

Updates of ['PyYAML', 'envoy', 'kubernetes', 'zsh', 'gnupg'] packages of Photon OS have been released.

Affected Packages

Critical

PyYAML - ['CVE-2020-1747']

Important

envoy - ['CVE-2020-8659', 'CVE-2019-18838', 'CVE-2019-18836', 'CVE-2019-15225', 'CVE-2020-8661', 'CVE-2019-15226']

zsh - ['CVE-2019-20044']

gnupg - ['CVE-2019-14855']

Moderate

envoy - ['CVE-2020-8664']

kubernetes - ['CVE-2020-8552', 'CVE-2019-11250', 'CVE-2019-11251']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

PyYAML-debuginfo-3.12-6.ph2.x86_64.rpm | size : 572K , sha256 : 3059fb4af9880cb21af55199d3061a54afbf7cf8a8a42048f801d103b3fc35ad , build time : Tue, 14 Apr 2020 09:17:13 UTC

PyYAML-3.12-6.ph2.x86_64.rpm | size : 200K , sha256 : c20de3c6fa6b0eec655cecb2d5cfc910e320260430d84f8ab96d241954a555ad , build time : Tue, 14 Apr 2020 09:17:13 UTC

envoy-debuginfo-1.13.1-1.ph2.x86_64.rpm | size : 8.5M , sha256 : f688f75ef55b4ac7e71f7ab6322d0cf1991bf67a4f0c551f41831507c46b4a63 , build time : Tue, 14 Apr 2020 10:14:30 UTC

envoy-1.13.1-1.ph2.x86_64.rpm | size : 23M , sha256 : 93ff1e380104a2752a8fd3d721112358ff994e06aba516a5256788b67c8846cc , build time : Tue, 14 Apr 2020 10:14:30 UTC

envoy-debuginfo-1.13.1-1.ph2.x86_64.rpm | size : 8.5M , sha256 : f688f75ef55b4ac7e71f7ab6322d0cf1991bf67a4f0c551f41831507c46b4a63 , build time : Tue, 14 Apr 2020 10:14:30 UTC

envoy-1.13.1-1.ph2.x86_64.rpm | size : 23M , sha256 : 93ff1e380104a2752a8fd3d721112358ff994e06aba516a5256788b67c8846cc , build time : Tue, 14 Apr 2020 10:14:30 UTC

kubernetes-kubeadm-1.13.12-1.ph2.x86_64.rpm | size : 11M , sha256 : fe10d56ea015ad970322bd4fb5c9d9ec4bfc724f333ac8a29e10d7987f90e6d6 , build time : Tue, 14 Apr 2020 09:53:43 UTC

kubernetes-1.13.12-1.ph2.x86_64.rpm | size : 181M , sha256 : fe4871da5f96a6415828df47d74ee6556daaa3d383d7eef0fe79732c6d225707 , build time : Tue, 14 Apr 2020 09:53:43 UTC

kubernetes-pause-1.13.12-1.ph2.x86_64.rpm | size : 284K , sha256 : 4497bfacbf1066567b0bdd64647f528d9c28ada002ac9b6c1960e62de0bc4a7d , build time : Tue, 14 Apr 2020 09:53:43 UTC

kubernetes-kubectl-extras-1.13.12-1.ph2.x86_64.rpm | size : 35M , sha256 : 13ce5f9d863c3e4357f387b860417fdea9e3792a6450c13d7f7a352222165af8 , build time : Tue, 14 Apr 2020 09:53:43 UTC

zsh-debuginfo-5.8-1.ph2.x86_64.rpm | size : 1.9M , sha256 : 9b306ea982f4dc963e983ac14e94669dd71664673889bf7dfdd05d700fd5a898 , build time : Tue, 14 Apr 2020 09:57:55 UTC

zsh-5.8-1.ph2.x86_64.rpm | size : 3.3M , sha256 : d2fd740596fc9f56439b6dff891edf5fa6934b800d5e81b6ce72358c3ca5774f , build time : Tue, 14 Apr 2020 09:57:55 UTC

zsh-html-5.8-1.ph2.x86_64.rpm | size : 600K , sha256 : d1d6b4862ddda8477fa7265027ccb060d1e01cdc86d78b9086940468c18da112 , build time : Tue, 14 Apr 2020 09:57:55 UTC

gnupg-debuginfo-2.2.18-1.ph2.x86_64.rpm | size : 8.1M , sha256 : dc9d0b958126783f22f483ccf1724d004c90e309a5e63754d4edfba0cbc3ec75 , build time : Tue, 14 Apr 2020 09:57:44 UTC

gnupg-2.2.18-1.ph2.x86_64.rpm | size : 4.1M , sha256 : 94ffb415b104c88189e0c613f16a053a4b28c7e963926630664ba686697238ea , build time : Tue, 14 Apr 2020 09:57:44 UTC