Security Update 2.0 196

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2019-0196

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2019-09-24

Affected Release: 2.0

Details

Updates of ['oniguruma', 'ruby', 'git', 'libmspack', 'libxslt', 'subversion', 'libssh2'] packages of Photon OS have been released.

Affected Packages

Critical

oniguruma - ['CVE-2019-19012']

Important

oniguruma - ['CVE-2019-19204', 'CVE-2019-19246', 'CVE-2019-16163', 'CVE-2019-19203']

ruby - ['CVE-2019-16255', 'CVE-2020-5247', 'CVE-2019-16201']

git - ['CVE-2019-19604']

libmspack - ['CVE-2018-14681', 'CVE-2018-14682']

libxslt - ['CVE-2019-5815']

subversion - ['CVE-2018-11803']

libssh2 - ['CVE-2019-17498']

Moderate

oniguruma - ['CVE-2019-13225']

ruby - ['CVE-2019-15845']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

oniguruma-6.9.3-1.ph2.x86_64.rpm | size : 224K , sha256 : a17c05bd728172e4c1a82c1b79406ebb34f7c6e5299fcc062b34b8aa63e7cbd2 , build time : Fri, 20 Dec 2019 02:51:11 UTC

oniguruma-debuginfo-6.9.3-1.ph2.x86_64.rpm | size : 620K , sha256 : b94b9ce10a575ed28e3e773a26895dd26da3540aa800b510474842daf6c44612 , build time : Fri, 20 Dec 2019 02:51:11 UTC

oniguruma-6.9.3-1.ph2.x86_64.rpm | size : 224K , sha256 : a17c05bd728172e4c1a82c1b79406ebb34f7c6e5299fcc062b34b8aa63e7cbd2 , build time : Fri, 20 Dec 2019 02:51:11 UTC

oniguruma-debuginfo-6.9.3-1.ph2.x86_64.rpm | size : 620K , sha256 : b94b9ce10a575ed28e3e773a26895dd26da3540aa800b510474842daf6c44612 , build time : Fri, 20 Dec 2019 02:51:11 UTC

oniguruma-6.9.3-1.ph2.x86_64.rpm | size : 224K , sha256 : a17c05bd728172e4c1a82c1b79406ebb34f7c6e5299fcc062b34b8aa63e7cbd2 , build time : Fri, 20 Dec 2019 02:51:11 UTC

oniguruma-debuginfo-6.9.3-1.ph2.x86_64.rpm | size : 620K , sha256 : b94b9ce10a575ed28e3e773a26895dd26da3540aa800b510474842daf6c44612 , build time : Fri, 20 Dec 2019 02:51:11 UTC

ruby-2.5.7-1.ph2.x86_64.rpm | size : 9.4M , sha256 : fe7c983353643b30b9bb4b5f716b3efb5a58b51a3b3070c609ab8641bb461d53 , build time : Fri, 20 Dec 2019 02:55:47 UTC

ruby-debuginfo-2.5.7-1.ph2.x86_64.rpm | size : 12M , sha256 : 7f22222f9211837f94f7f3434c5b2254bff91adce71e4d719e66456cf5e3ea1e , build time : Fri, 20 Dec 2019 02:55:47 UTC

ruby-2.5.7-1.ph2.x86_64.rpm | size : 9.4M , sha256 : fe7c983353643b30b9bb4b5f716b3efb5a58b51a3b3070c609ab8641bb461d53 , build time : Fri, 20 Dec 2019 02:55:47 UTC

ruby-debuginfo-2.5.7-1.ph2.x86_64.rpm | size : 12M , sha256 : 7f22222f9211837f94f7f3434c5b2254bff91adce71e4d719e66456cf5e3ea1e , build time : Fri, 20 Dec 2019 02:55:47 UTC

git-debuginfo-2.23.1-1.ph2.x86_64.rpm | size : 42M , sha256 : 6394675c61d997bf5371472f98792d6dd8a5d362f79883f0a63cf0a13da59fd4 , build time : Fri, 20 Dec 2019 02:53:23 UTC

git-2.23.1-1.ph2.x86_64.rpm | size : 12M , sha256 : 9f1c570814628a5a03eea59bb6790071eb16fa23e77244f71dab64d5418f999a , build time : Fri, 20 Dec 2019 02:53:23 UTC

git-lang-2.23.1-1.ph2.x86_64.rpm | size : 2.0M , sha256 : 7028eddd379735b7242d956bcbb9c36d1133419dbad4701c362f0a218a9a3a8f , build time : Fri, 20 Dec 2019 02:53:23 UTC

libmspack-debuginfo-0.7.1alpha-1.ph2.x86_64.rpm | size : 196K , sha256 : 3408235095755e0b66fff12b742010fdc0a40f21371a0cba20050744a0a579bb , build time : Fri, 20 Dec 2019 02:51:13 UTC

libmspack-0.7.1alpha-1.ph2.x86_64.rpm | size : 60K , sha256 : 2fe94ff984f9b6b2fa9b8fb6e7e7666695a81749a90fd56e550eda8faba0f33b , build time : Fri, 20 Dec 2019 02:51:13 UTC

libmspack-devel-0.7.1alpha-1.ph2.x86_64.rpm | size : 68K , sha256 : be83c0735efedc411ca4ea3901b542bfe5fe8063927c96e376760cccaa298b81 , build time : Fri, 20 Dec 2019 02:51:13 UTC

libxslt-1.1.29-8.ph2.x86_64.rpm | size : 176K , sha256 : 9f55a5630d2c4af1c13dc3dbc46a1b759ecfa66c8ec5898d175b0ca68396b895 , build time : Fri, 20 Dec 2019 02:51:36 UTC

libxslt-debuginfo-1.1.29-8.ph2.x86_64.rpm | size : 696K , sha256 : d72f87bf958b36d5c95a03a2f725acae64058d95b5106243866168edeeb829c5 , build time : Fri, 20 Dec 2019 02:51:36 UTC

libxslt-devel-1.1.29-8.ph2.x86_64.rpm | size : 340K , sha256 : 03e93973ee84b28645f6eb782688b12e4440f6383fee4bc2ac0169c8db9d861d , build time : Fri, 20 Dec 2019 02:51:36 UTC

subversion-devel-1.10.4-1.ph2.x86_64.rpm | size : 376K , sha256 : 1eb383c9ba2a6863cfd604267f63c7fd9c6a93a289ecb6bbfd2383f8e4339f8c , build time : Fri, 20 Dec 2019 02:53:31 UTC

subversion-debuginfo-1.10.4-1.ph2.x86_64.rpm | size : 8.5M , sha256 : 08345c678cd59f439aaf0db66a54c8a86a91957c75e15d8fd027ad87b41b2189 , build time : Fri, 20 Dec 2019 02:53:31 UTC

subversion-1.10.4-1.ph2.x86_64.rpm | size : 2.9M , sha256 : f6fc063424ed3905871ae6a831d0e98bb80a7413cceac82e75151a69e1da0a3c , build time : Fri, 20 Dec 2019 02:53:31 UTC

libssh2-devel-1.9.0-2.ph2.x86_64.rpm | size : 132K , sha256 : 4a97108ee12a4b4b091d7ff76c0d69119a59eb694c6a260f8f4af851384c080f , build time : Fri, 20 Dec 2019 02:51:31 UTC

libssh2-1.9.0-2.ph2.x86_64.rpm | size : 116K , sha256 : 139ab6ede23c639569892f87002b72dbd29cd2bca260a5ab59cffb6177e4b8f2 , build time : Fri, 20 Dec 2019 02:51:31 UTC

libssh2-debuginfo-1.9.0-2.ph2.x86_64.rpm | size : 500K , sha256 : b0a754c3fd4592b7fa1da7a24adb5d09a585e29e0ace1cd28032cb036caa09e6 , build time : Fri, 20 Dec 2019 02:51:31 UTC