Security Update 3.0 57

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2020-3.0-0057

Type : Security

Severity : ['Important', 'Moderate']

Issue date : 2020-02-14

Affected Release: 3.0

Details

Updates of ['yarn', 'nginx', 'python2', 'bash', 'libsolv'] packages of Photon OS have been released.

Affected Packages

Important

yarn - ['CVE-2019-10773']

python2 - ['CVE-2019-9674']

bash - ['CVE-2019-18276']

libsolv - ['CVE-2019-20387']

Moderate

nginx - ['CVE-2019-20372']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

yarn-1.10.1-6.ph3.noarch.rpm | size : 4.5M , sha256 : 9096aa781882f6af19ffde6dae0fb22a13ee95777e12a13b202377926465d33b , build time : Thu, 13 Feb 2020 03:27:57 UTC

nginx-1.16.1-2.ph3.x86_64.rpm | size : 548K , sha256 : e19931c748c4530adbc3bb56af0af64d6fed88fae2d3214ba532d3f7806a47dd , build time : Thu, 13 Feb 2020 03:20:56 UTC

nginx-debuginfo-1.16.1-2.ph3.x86_64.rpm | size : 4.5M , sha256 : 0061a2445babe9f28e428498383774b7ae5accc06fa68932bd68cb1a92493726 , build time : Thu, 13 Feb 2020 03:20:56 UTC

python2-2.7.17-2.ph3.x86_64.rpm | size : 736K , sha256 : b4a470f66c43b98cba58e5f67c04123ab93f9a8143d1bf3299e782e33e7887cb , build time : Thu, 13 Feb 2020 03:19:56 UTC

python2-debuginfo-2.7.17-2.ph3.x86_64.rpm | size : 6.0M , sha256 : 81b3df367d0d71254ab878696a78f0ee88e0bb7005b4e043541e7ec4cd1a9e3f , build time : Thu, 13 Feb 2020 03:19:56 UTC

python2-devel-2.7.17-2.ph3.x86_64.rpm | size : 1.1M , sha256 : 17ee7c48f78d48d5792190f3bf66fc713c6abce3b05893901f1c743c76622a75 , build time : Thu, 13 Feb 2020 03:19:56 UTC

python2-libs-2.7.17-2.ph3.x86_64.rpm | size : 5.6M , sha256 : fcb652ed18d52c31f2bcbbef30adc6e9e866e48a701a1f324698dd59fcf07911 , build time : Thu, 13 Feb 2020 03:19:56 UTC

python2-test-2.7.17-2.ph3.x86_64.rpm | size : 2.7M , sha256 : d5cf8bd78c0b05e79dcf70ba3e4897d47e39d15111ef09fb9122f8ed719d264d , build time : Thu, 13 Feb 2020 03:19:56 UTC

python2-tools-2.7.17-2.ph3.x86_64.rpm | size : 12K , sha256 : 149dbae838291e692b778ca0b8b377a3aff385270a6d6def06ec9a71724d8ef8 , build time : Thu, 13 Feb 2020 03:19:56 UTC

bash-4.4.18-2.ph3.x86_64.rpm | size : 1016K , sha256 : 718892ecc659550550af9ed1bdfe4b11631f2a2aa3cfba1795957153b09cb00c , build time : Thu, 13 Feb 2020 03:17:08 UTC

bash-debuginfo-4.4.18-2.ph3.x86_64.rpm | size : 80K , sha256 : 3ce2af83f9fe7978aefdab1fb7312558765effef34f21be42be990394d707c17 , build time : Thu, 13 Feb 2020 03:17:08 UTC

bash-devel-4.4.18-2.ph3.x86_64.rpm | size : 80K , sha256 : af2b23a153ae34bf12319516c78cc8b97141443057a6899e746c8f362638f6af , build time : Thu, 13 Feb 2020 03:17:08 UTC

bash-lang-4.4.18-2.ph3.x86_64.rpm | size : 1.3M , sha256 : fbb410ca4fec159959aa7ecd3180abd2d7a022119843379fd88de9dacbf34c1d , build time : Thu, 13 Feb 2020 03:17:08 UTC

libsolv-0.6.35-2.ph3.x86_64.rpm | size : 348K , sha256 : 457a7e59a378e86f634dbd20e441d4c56652ec4622fbc3c2e6a1366ac87b1b20 , build time : Thu, 13 Feb 2020 03:20:42 UTC

libsolv-debuginfo-0.6.35-2.ph3.x86_64.rpm | size : 52K , sha256 : e19301472a4600b1ba844b50a788698130788b568ab28ccf6373cb545c3b5d2f , build time : Thu, 13 Feb 2020 03:20:42 UTC

libsolv-devel-0.6.35-2.ph3.x86_64.rpm | size : 100K , sha256 : f7b876af62dd3efa28eb5cedeb41d6589f7f8d3655da7ca6e1d7ba0fd14264a7 , build time : Thu, 13 Feb 2020 03:20:42 UTC