Security Update 3.0 2

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2019-3.0-0002

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2019-02-26

Affected Release: 3.0

Details

Updates of ['linux', 'nginx', 'linux-esx', 'elasticsearch', 'libgd', 'curl', 'sqlite', 'libtiff', 'openjdk8', 'kibana', 'linux-secure', 'linux-aws'] packages of Photon OS have been released.

Affected Packages

Critical

curl - ['CVE-2019-3822']

kibana - ['CVE-2018-17246', 'CVE-2018-17245']

Important

linux - ['CVE-2019-8912']

linux-esx - ['CVE-2019-8912']

libgd - ['CVE-2019-6977']

curl - ['CVE-2019-3823', 'CVE-2018-16890']

sqlite - ['CVE-2018-20346']

libtiff - ['CVE-2019-6128']

linux-secure - ['CVE-2019-8912']

linux-aws - ['CVE-2019-8912']

Moderate

nginx - ['CVE-2018-16845']

elasticsearch - ['CVE-2018-17244']

Low

openjdk8 - ['CVE-2019-2426', 'CVE-2019-2422', 'CVE-2019-2449']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux', 'linux-esx', 'linux-secure', 'linux-aws'] after updating, a reboot is required for taking effect.

Updated Packages Information

linux-4.19.15-3.ph3.x86_64.rpm | size : 21M , sha256 : cf18e5a618fec98cd9635b4065949d96758e4ebcd4ff318825d903dc10ad0c25 , build time : Mon, 25 Feb 2019 20:03:24 UTC

linux-aws-4.19.15-2.ph3.x86_64.rpm | size : 17M , sha256 : 242161f4ac3255f12c42a78098880187183bfaa8f3b893ef468aade902dcef68 , build time : Mon, 25 Feb 2019 15:19:50 UTC

linux-aws-debuginfo-4.19.15-2.ph3.x86_64.rpm | size : 472M , sha256 : 391af86876f210e77c62433461bf8afe33264d281cc3aa62e695fe53e2ba674b , build time : Mon, 25 Feb 2019 15:19:50 UTC

linux-aws-devel-4.19.15-2.ph3.x86_64.rpm | size : 16M , sha256 : 174ffd4671d80509a01abae8a5929604df28ba5519b71456c1aca96295c01014 , build time : Mon, 25 Feb 2019 15:19:50 UTC

linux-aws-docs-4.19.15-2.ph3.x86_64.rpm | size : 8.2M , sha256 : cf87df356bb7d814701d02956672228065578c7245009a73a5d6604d9d44fcd4 , build time : Mon, 25 Feb 2019 15:19:50 UTC

linux-aws-drivers-gpu-4.19.15-2.ph3.x86_64.rpm | size : 1.5M , sha256 : 2e0377722024b95a72baf01372ac197b7888cae35015b6d431f2923294b1b948 , build time : Mon, 25 Feb 2019 15:19:50 UTC

linux-aws-oprofile-4.19.15-2.ph3.x86_64.rpm | size : 32K , sha256 : 575fdaef0fdda63c719119e59984ba7262478fff6a22d0093a0b72670dc0df33 , build time : Mon, 25 Feb 2019 15:19:50 UTC

linux-aws-sound-4.19.15-2.ph3.x86_64.rpm | size : 236K , sha256 : 5a286942fe44522571d0997ba1d9ebee75770321f4262a453979dbeba202a787 , build time : Mon, 25 Feb 2019 15:19:50 UTC

linux-aws-tools-4.19.15-2.ph3.x86_64.rpm | size : 9.6M , sha256 : 52cc086d13fa51cd67a973ce2ac2c92ed3f700269c97edcab2f8bb73a35b8ab1 , build time : Mon, 25 Feb 2019 15:19:50 UTC

linux-debuginfo-4.19.15-3.ph3.x86_64.rpm | size : 550M , sha256 : c03a660e6cdfa208fee1d434b18241d9573fb1f7e07860d009bb142058708393 , build time : Mon, 25 Feb 2019 15:21:25 UTC

linux-devel-4.19.15-3.ph3.x86_64.rpm | size : 17M , sha256 : 2a09c7a62d6af82f90b9089c846654ff132052d22de685f6e586abd57aba5f41 , build time : Mon, 25 Feb 2019 15:21:25 UTC

linux-docs-4.19.15-3.ph3.x86_64.rpm | size : 8.2M , sha256 : b1ce1c842bc451075999f1772c276009251720e0faff9695f9378ceb6ec23f61 , build time : Mon, 25 Feb 2019 15:21:25 UTC

linux-drivers-gpu-4.19.15-3.ph3.x86_64.rpm | size : 1.5M , sha256 : 92697772f764097ee2feeb71f1a6e21ca50364f9fa6668dea6712890ab32bc0f , build time : Mon, 25 Feb 2019 15:21:25 UTC

linux-drivers-sound-4.19.15-3.ph3.x86_64.rpm | size : 528K , sha256 : b34aee2fd3b4fb785c061bf0e30232c317c92b6b0efb289994b4d7799e5fbc5c , build time : Mon, 25 Feb 2019 15:21:25 UTC

linux-esx-4.19.15-2.ph3.x86_64.rpm | size : 8.5M , sha256 : 15e55e865df7b8b00a54b8f6c823d39d42476dc5bb53e42e92ba09cb85b3005a , build time : Mon, 25 Feb 2019 20:03:38 UTC

linux-esx-debuginfo-4.19.15-2.ph3.x86_64.rpm | size : 242M , sha256 : 439b8436b15687206c22270b3fe0ad4d370922c25b94eca36324da8bd01fb226 , build time : Mon, 25 Feb 2019 15:12:26 UTC

linux-esx-devel-4.19.15-2.ph3.x86_64.rpm | size : 12M , sha256 : 0e14d9c5618e087f3986e45a75be89d15a2274828d8c4b9f84216de7c842b20c , build time : Mon, 25 Feb 2019 15:12:26 UTC

linux-esx-docs-4.19.15-2.ph3.x86_64.rpm | size : 8.2M , sha256 : 7054c7fb4afbe6b2bcb84d69adb7ba413f70ef11a00b0cbb62f28d11b0db30b7 , build time : Mon, 25 Feb 2019 15:12:26 UTC

linux-firmware-20190205-1.ph3.noarch.rpm | size : 9.5M , sha256 : 9711dc25a82c79f83ffde8d1ac1693fa395dcd0eb67b9183ed69fff00e458a13 , build time : Mon, 25 Feb 2019 14:46:41 UTC

linux-oprofile-4.19.15-3.ph3.x86_64.rpm | size : 44K , sha256 : 8fb333edeca42e8cd67e1a6ac6076432e3e22df0233248a9a02d39cf388b9369 , build time : Mon, 25 Feb 2019 15:21:25 UTC

linux-secure-4.19.15-2.ph3.x86_64.rpm | size : 23M , sha256 : 885b3afa4172b3b72abb6ef7200052bad70e3af3d9c1922ce83b1f0b2cb363b2 , build time : Mon, 25 Feb 2019 20:03:50 UTC

linux-secure-debuginfo-4.19.15-2.ph3.x86_64.rpm | size : 203M , sha256 : a0c63f022dc84772e2e014dad07e29be6385614a8c8029815c150eb5981137b9 , build time : Mon, 25 Feb 2019 15:15:48 UTC

linux-secure-devel-4.19.15-2.ph3.x86_64.rpm | size : 13M , sha256 : c8b82a3cf58e7ebd3800c1a8702217c364cd848def56e76f0e3058b1a8db9516 , build time : Mon, 25 Feb 2019 15:15:48 UTC

linux-secure-docs-4.19.15-2.ph3.x86_64.rpm | size : 8.2M , sha256 : 42282fb0360fca04e3b167f20df25fdcba0fb460affcb27be03fac2dd4f56bca , build time : Mon, 25 Feb 2019 15:15:48 UTC

linux-secure-lkcm-4.19.15-2.ph3.x86_64.rpm | size : 24K , sha256 : fd9d8f53f092b65782f430a186c409fe3f96e394e40b76997c691a88e75c80ff , build time : Mon, 25 Feb 2019 15:15:48 UTC

linux-tools-4.19.15-3.ph3.x86_64.rpm | size : 9.6M , sha256 : d4f7e71ec788e0777de913e2f0075596347f26b769a4bf20ab3629126a9d00b1 , build time : Mon, 25 Feb 2019 15:21:25 UTC

nginx-1.15.3-4.ph3.x86_64.rpm | size : 544K , sha256 : 59d30b685f1edce02fd98cd3c12ef3122aa0fec2061fe4e26c5dc203f973e660 , build time : Mon, 25 Feb 2019 14:44:37 UTC

nginx-debuginfo-1.15.3-4.ph3.x86_64.rpm | size : 4.4M , sha256 : 539ca429d7115f0296de110b3ca0cf98e8be371d0937419b60799446e6151cec , build time : Mon, 25 Feb 2019 14:44:37 UTC

linux-esx-4.19.15-2.ph3.x86_64.rpm | size : 8.5M , sha256 : 15e55e865df7b8b00a54b8f6c823d39d42476dc5bb53e42e92ba09cb85b3005a , build time : Mon, 25 Feb 2019 20:03:38 UTC

linux-esx-debuginfo-4.19.15-2.ph3.x86_64.rpm | size : 242M , sha256 : 439b8436b15687206c22270b3fe0ad4d370922c25b94eca36324da8bd01fb226 , build time : Mon, 25 Feb 2019 15:12:26 UTC

linux-esx-devel-4.19.15-2.ph3.x86_64.rpm | size : 12M , sha256 : 0e14d9c5618e087f3986e45a75be89d15a2274828d8c4b9f84216de7c842b20c , build time : Mon, 25 Feb 2019 15:12:26 UTC

linux-esx-docs-4.19.15-2.ph3.x86_64.rpm | size : 8.2M , sha256 : 7054c7fb4afbe6b2bcb84d69adb7ba413f70ef11a00b0cbb62f28d11b0db30b7 , build time : Mon, 25 Feb 2019 15:12:26 UTC

elasticsearch-6.4.3-1.ph3.x86_64.rpm | size : 33M , sha256 : 7b7ae58943c414ed3ba555eafe80eecb9df96a3217ce82abc0edb7eb554725b6 , build time : Mon, 25 Feb 2019 15:12:56 UTC

libgd-2.2.5-4.ph3.x86_64.rpm | size : 152K , sha256 : 8e6c5e517d6027bea9a53522ba2de8647b3c9d678ecb6bcdd87ac498d8728d07 , build time : Mon, 25 Feb 2019 15:03:04 UTC

libgd-debuginfo-2.2.5-4.ph3.x86_64.rpm | size : 492K , sha256 : d433ac0dd7ba216baa9d2c14131f651107d15b4a1bab83b79a02933dcb0eb2b2 , build time : Mon, 25 Feb 2019 15:03:04 UTC

libgd-devel-2.2.5-4.ph3.x86_64.rpm | size : 40K , sha256 : 999262b8ae6226184e9b3d476920815affe87a5708c6ad4dc1c17ec846f8e7bd , build time : Mon, 25 Feb 2019 15:03:04 UTC

curl-7.61.1-3.ph3.x86_64.rpm | size : 180K , sha256 : 26f1b21fa73f2cc92fb1091ffb9d84b4081f408f34ce2641ece65fc7f4af8fd9 , build time : Mon, 25 Feb 2019 14:45:29 UTC

curl-debuginfo-7.61.1-3.ph3.x86_64.rpm | size : 36K , sha256 : f0fce6760481fe24c0446a343e3b560069548100acbaaa0a92e35dba32aab04e , build time : Mon, 25 Feb 2019 14:45:29 UTC

curl-devel-7.61.1-3.ph3.x86_64.rpm | size : 688K , sha256 : 296161c28031fa5d3fea397eb442650247778cc6a0abbf12be5ed599ec4b4b6e , build time : Mon, 25 Feb 2019 14:45:29 UTC

curl-libs-7.61.1-3.ph3.x86_64.rpm | size : 252K , sha256 : ffdcf51f748d13a71e80c6180dc20038e18b9901af204a9dc2c7bc828fad7810 , build time : Mon, 25 Feb 2019 14:45:29 UTC

sqlite-3.26.0-1.ph3.x86_64.rpm | size : 700K , sha256 : 5f089f69d3a311662ab27cd6348d298e6f001c1930fe5ddce741a4ab03d576a2 , build time : Mon, 25 Feb 2019 14:43:03 UTC

sqlite-debuginfo-3.26.0-1.ph3.x86_64.rpm | size : 5.1M , sha256 : cfa66d00f425271e429f886e69f49ac81f9ccef025c7e45159a4d5e968e20710 , build time : Mon, 25 Feb 2019 14:43:03 UTC

sqlite-devel-3.26.0-1.ph3.x86_64.rpm | size : 156K , sha256 : cd6689190e6c2098aaab5880302575cce9ee9102311f02082d68eac3f357d1f8 , build time : Mon, 25 Feb 2019 14:43:03 UTC

sqlite-libs-3.26.0-1.ph3.x86_64.rpm | size : 600K , sha256 : 9242552d90a6907ef15dae720c9a5536759990e98794d302d451b801a2026424 , build time : Mon, 25 Feb 2019 14:43:03 UTC

libtiff-4.0.10-3.ph3.x86_64.rpm | size : 428K , sha256 : 5007d8185fe8eb1b076e9a393f4ac33d6a50cf0aba4a11c18e5661c866a50ea2 , build time : Mon, 25 Feb 2019 14:44:43 UTC

libtiff-debuginfo-4.0.10-3.ph3.x86_64.rpm | size : 1.2M , sha256 : 0294b13652609988a3135f8591ee3ab95085ab8260c2ef2f7eccd6d6750a87ed , build time : Mon, 25 Feb 2019 14:44:43 UTC

libtiff-devel-4.0.10-3.ph3.x86_64.rpm | size : 564K , sha256 : 8940eb89eb1b72c708b310010a8eda37439093cfd2d2e9708ce6c128f6d6fc81 , build time : Mon, 25 Feb 2019 14:44:43 UTC

openjdk8-1.8.0.202-1.ph3.x86_64.rpm | size : 12M , sha256 : 7d00b73763ce08ecdfcd07faf272e10fe44058384c7aeb449eda4efc22924a60 , build time : Mon, 25 Feb 2019 15:10:34 UTC

openjdk8-debuginfo-1.8.0.202-1.ph3.x86_64.rpm | size : 10M , sha256 : 646e34616526cb6ba3368ca4b4a44f594ad55899709f8c8cb7ec2556d7f8bd23 , build time : Mon, 25 Feb 2019 15:10:34 UTC

openjdk8-doc-1.8.0.202-1.ph3.x86_64.rpm | size : 2.4M , sha256 : c212de24fc39b332027b9a02b0ff62ce53ac50957ee3965074626d54989db889 , build time : Mon, 25 Feb 2019 15:10:34 UTC

openjdk8-sample-1.8.0.202-1.ph3.x86_64.rpm | size : 464K , sha256 : be9b4932c6ad5190102f8dbd918fffff6e1aa95f3ffb6b7d44cd780ac850cc1b , build time : Mon, 25 Feb 2019 15:10:34 UTC

openjdk8-src-1.8.0.202-1.ph3.x86_64.rpm | size : 47M , sha256 : 8aa97d15bbe53241fe5b69480c55a505062bd354b01eb5eb7bd9e6f7bdbb996e , build time : Mon, 25 Feb 2019 15:10:34 UTC

kibana-6.4.3-1.ph3.x86_64.rpm | size : 61M , sha256 : e067bac5953bfe81ac7cee2887b3e3c864303de502fbc842a19d56edb58c8bf6 , build time : Mon, 25 Feb 2019 16:22:22 UTC