Security Updates 1.0 338

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2020-1.0-0338
Type : Security
Severity : ['Critical', 'Important', 'Moderate']
Issued on : 2020-11-17
Affected Versions : Photon OS 1.0

Details

An update of {'python3', 'linux', 'linux-esx', 'pam_tacplus', 'mysql', 'ruby', 'apache-tomcat'} packages of Photon OS has been released.

Affected Packages:

Critical

python3 - ['CVE-2020-27619']
pam_tacplus - ['CVE-2020-27743']

Important

linux - ['CVE-2020-25705', 'CVE-2020-25645', 'CVE-2020-25668', 'CVE-2020-25643']
linux-esx - ['CVE-2020-25705', 'CVE-2020-25645', 'CVE-2020-25668', 'CVE-2020-25643']
ruby - ['CVE-2020-25613']

Moderate

linux - ['CVE-2020-8694', 'CVE-2020-25656', 'CVE-2020-28974']
linux-esx - ['CVE-2020-8694', 'CVE-2020-25656', 'CVE-2020-28974']
apache-tomcat - ['CVE-2020-13943']
mysql - ['CVE-2020-14776', 'CVE-2020-14765', 'CVE-2020-14812', 'CVE-2020-14867', 'CVE-2020-14775', 'CVE-2020-14790', 'CVE-2020-14793', 'CVE-2020-14789', 'CVE-2020-14672', 'CVE-2020-14769', 'CVE-2020-14827', 'CVE-2020-14760', 'CVE-2020-14869']

Solution

Update the affected packages (tdnf update package)
Note: For packages ['linux', 'linux-esx'] after updating, a reboot is required for taking effect.

Updated Packages Information

apache-tomcat-8.5.51-5.ph1.noarch.rpm , sha256 : d24ecf6f07cedd14620f9ee36b89ff47261d59b5bf975deb6ea2780e4af202ae , size : 8.0M , build_date : Sat, 14 Nov 2020 03:40:40 UTC
linux-api-headers-4.4.243-1.ph1.noarch.rpm , sha256 : 067446eb1b3f52b33fef75aad7ea75341fbca5e8bf57c2999620d162a680b7a7 , size : 1.1M , build_date : Sat, 14 Nov 2020 02:53:33 UTC
linux-4.4.243-1.ph1.x86_64.rpm , sha256 : b8e290441c8b24276c33f8bbda60874e1749c3205c70ef63e04905416cc28e9a , size : 19M , build_date : Sat, 14 Nov 2020 07:36:38 UTC
linux-dev-4.4.243-1.ph1.x86_64.rpm , sha256 : 60eeeea193bed1ee83a1a8b9c236a8b95b885efd79306366dac552204094f7b1 , size : 10M , build_date : Sat, 14 Nov 2020 04:04:54 UTC
linux-docs-4.4.243-1.ph1.x86_64.rpm , sha256 : 4452865cb6634c5e168b7ddce0a3a6de0178fc0246cb4a755a32c9eef00cbe77 , size : 6.6M , build_date : Sat, 14 Nov 2020 04:04:54 UTC
linux-drivers-gpu-4.4.243-1.ph1.x86_64.rpm , sha256 : ef948fa45d5a7462a4e1c76720c7b562222976dbe9bee69ee2eff61a772ad044 , size : 1.5M , build_date : Sat, 14 Nov 2020 04:04:54 UTC
linux-esx-4.4.243-1.ph1.x86_64.rpm , sha256 : 32ec69ed9587c1c448c710c92d75990021242584709654293f2b715b6fbb58db , size : 7.7M , build_date : Sat, 14 Nov 2020 07:37:04 UTC
linux-esx-devel-4.4.243-1.ph1.x86_64.rpm , sha256 : 504d503a82b0236a81f171ec1c4e999032179d92d5c7dc7e7e1e97233786e197 , size : 9.8M , build_date : Sat, 14 Nov 2020 03:28:15 UTC
linux-esx-docs-4.4.243-1.ph1.x86_64.rpm , sha256 : 5f375c9c5b6a4f09956bffa7f451106d85828606c748e911538032fccd4985a4 , size : 6.7M , build_date : Sat, 14 Nov 2020 03:28:15 UTC
linux-oprofile-4.4.243-1.ph1.x86_64.rpm , sha256 : dc413edfb0f88afc219fa18abeb5d8f14510a3746f66581d1720ad6ea29c7045 , size : 50K , build_date : Sat, 14 Nov 2020 04:04:54 UTC
linux-sound-4.4.243-1.ph1.x86_64.rpm , sha256 : 4d148984767097ff44f678e1945e84490a0d1c072d9f1e61fb6c38453405af67 , size : 265K , build_date : Sat, 14 Nov 2020 04:04:54 UTC
linux-tools-4.4.243-1.ph1.x86_64.rpm , sha256 : bcc51a3b90c3c7e98c5bf75935caab6c7137b3b32b30b078862ff052ec39d7cd , size : 834K , build_date : Sat, 14 Nov 2020 04:04:54 UTC
mysql-5.7.32-1.ph1.x86_64.rpm , sha256 : 1053f92b8e6af8d335ede51ac16df3b08dad216e4eba4e4e720af00e2d8f6acd , size : 47M , build_date : Sat, 14 Nov 2020 03:27:01 UTC
mysql-devel-5.7.32-1.ph1.x86_64.rpm , sha256 : 13565734ea0ae44a4f1282e09257fe1b6783f6d674ff47a0ef7b99dd05dca10f , size : 1.7M , build_date : Sat, 14 Nov 2020 03:27:01 UTC
pam_tacplus-1.6.1-1.ph1.x86_64.rpm , sha256 : 92a0d492e5094eca0fd1c62cee97e2600003f12b7e9462035aee73b5a1812009 , size : 57K , build_date : Sat, 14 Nov 2020 03:16:02 UTC
pam_tacplus-devel-1.6.1-1.ph1.x86_64.rpm , sha256 : 85a0c6836c3ba8daf6ecd036f11326828a56995d7120f5470e9f3003b95ef29c , size : 28K , build_date : Sat, 14 Nov 2020 03:16:02 UTC
python3-3.5.6-18.ph1.x86_64.rpm , sha256 : ecd05f778c61a0b25e6266605afd89820f62524685f53909df9289afe89d8080 , size : 1.1M , build_date : Sat, 14 Nov 2020 02:59:21 UTC
python3-devel-3.5.6-18.ph1.x86_64.rpm , sha256 : bbf2e38c41b8f27cd3ee3298844f695ae5ee946dd7cd7351c133b7c2d01895f6 , size : 154K , build_date : Sat, 14 Nov 2020 02:59:21 UTC
python3-libs-3.5.6-18.ph1.x86_64.rpm , sha256 : 968b45d197d43998466c411d04350133fe736c8914eedb1e11d1ba03711bbca3 , size : 8.8M , build_date : Sat, 14 Nov 2020 02:59:21 UTC
python3-tools-3.5.6-18.ph1.x86_64.rpm , sha256 : 46bd3e0b0262215cb5e3b3d878506f4db05d383d9c41a4c5b97c3b6aa287d5f2 , size : 167K , build_date : Sat, 14 Nov 2020 02:59:21 UTC
ruby-2.5.8-2.ph1.x86_64.rpm , sha256 : 4ee039475d8e7e922fac25b0126562e6854b36b0579f2936f7bef30483b07068 , size : 9.2M , build_date : Sat, 14 Nov 2020 03:22:28 UTC