Security Update 2.0 190

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2019-0190

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2019-11-20

Affected Release: 2.0

Details

Updates of ['ncurses', 'yum', 'libsoup', 'binutils', 'python2', 'postgresql', 'nodejs'] packages of Photon OS have been released.

Affected Packages

Critical

yum - ['CVE-2013-1910']

libsoup - ['CVE-2019-17266']

Important

python2 - ['CVE-2019-5010']

postgresql - ['CVE-2019-10208']

nodejs - ['CVE-2018-12121', 'CVE-2018-12116', 'CVE-2019-5737', 'CVE-2018-12122']

Moderate

ncurses - ['CVE-2019-17595', 'CVE-2019-17594']

binutils - ['CVE-2019-17450', 'CVE-2019-17451']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

ncurses-terminfo-6.1-1.ph2.x86_64.rpm | size : 616K , sha256 : b70a0174b71ee3e5a0aa2982fc8be1f8efb987d37c4b15b37508451c32e1fe6f , build time : Wed, 20 Nov 2019 06:13:50 UTC

ncurses-libs-6.1-1.ph2.x86_64.rpm | size : 276K , sha256 : ebecda58f54eadf8677a416d5e43f15cc62485239be47f7ebed3e8d5a4656d0c , build time : Wed, 20 Nov 2019 06:13:50 UTC

ncurses-compat-6.1-1.ph2.x86_64.rpm | size : 256K , sha256 : c54e6fa684a6d7d9659ceff21e42d5e1bb47fb6f6d304d6f7f7a043a2e552c13 , build time : Wed, 20 Nov 2019 06:13:50 UTC

ncurses-debuginfo-6.1-1.ph2.x86_64.rpm | size : 2.0M , sha256 : 80f39834c65d668b578f25b5492de7e7dd7b8858119ef1c444465edc820f3cdc , build time : Wed, 20 Nov 2019 06:13:50 UTC

ncurses-6.1-1.ph2.x86_64.rpm | size : 208K , sha256 : 89cfea336c01123d30e699c10e2dbd69dd215b3195001eba29b94257c6024664 , build time : Wed, 20 Nov 2019 06:13:50 UTC

ncurses-devel-6.1-1.ph2.x86_64.rpm | size : 1.4M , sha256 : 806aa32c9fb5c4ff20928a98a53eb63e1be3ec1d0057d35c26bb9fc8bde79f0e , build time : Wed, 20 Nov 2019 06:13:50 UTC

yum-3.4.3-9.ph2.noarch.rpm | size : 1.4M , sha256 : 59ffc1610e1b02a16444a707223e9bc8af389961241b99972099cd78526a62a9 , build time : Wed, 20 Nov 2019 06:31:07 UTC

libsoup-lang-2.68.2-1.ph2.x86_64.rpm | size : 76K , sha256 : 3584ab4ed45b6fedafcfcd94412a39c6c8de0b36058ef7c1f9ec025398e8943c , build time : Wed, 20 Nov 2019 06:32:32 UTC

libsoup-doc-2.68.2-1.ph2.x86_64.rpm | size : 332K , sha256 : bbd10c55a7d3e7222c360083b69dae344b46d2e98ed88b2861df9baefd4f707e , build time : Wed, 20 Nov 2019 06:32:32 UTC

libsoup-2.68.2-1.ph2.x86_64.rpm | size : 264K , sha256 : 24e3effe6628add9f0e96346f6a052684a69d72ab1a4863a1607a030e2911d17 , build time : Wed, 20 Nov 2019 06:32:32 UTC

libsoup-debuginfo-2.68.2-1.ph2.x86_64.rpm | size : 784K , sha256 : da06ca5468c6d27e983aaad8edc80619074c90d94bebc0314350622a8d640add , build time : Wed, 20 Nov 2019 06:32:32 UTC

libsoup-devel-2.68.2-1.ph2.x86_64.rpm | size : 48K , sha256 : 28548cca81fc8ca857f33483f711f039098cbaba130aad7614ab131ae908f4a6 , build time : Wed, 20 Nov 2019 06:32:32 UTC

binutils-devel-2.32-2.ph2.x86_64.rpm | size : 936K , sha256 : d1fc3128a0d3124855d761afd55339a30189bd1e3f909d8c6cc353628a6df382 , build time : Wed, 20 Nov 2019 06:10:57 UTC

binutils-2.32-2.ph2.x86_64.rpm | size : 8.5M , sha256 : 3cfc3585e744314d71ec890976732d7e83af37377f5e5e96c0c69d786cdf511a , build time : Wed, 20 Nov 2019 06:10:57 UTC

binutils-debuginfo-2.32-2.ph2.x86_64.rpm | size : 44M , sha256 : 314e90a2b6da3a8c23600d17706170619afbee549df3133f36404db095772bdc , build time : Wed, 20 Nov 2019 06:10:57 UTC

python2-debuginfo-2.7.15-13.ph2.x86_64.rpm | size : 6.1M , sha256 : 633ec65b1aaedbfef7b8943285df73853141d480b662f9a273ed4fbb3e8b81a4 , build time : Wed, 20 Nov 2019 06:20:56 UTC

python2-2.7.15-13.ph2.x86_64.rpm | size : 776K , sha256 : d2632d0bfda2ae172ae68ca7b9fcb1bc90c7e03ec4b158d5c43374a80487d2e6 , build time : Wed, 20 Nov 2019 06:20:56 UTC

python2-test-2.7.15-13.ph2.x86_64.rpm | size : 2.6M , sha256 : 74bca454652fdd67489933bed9a3a21599faaf1fc1b8fdb78c4982afe40b24ac , build time : Wed, 20 Nov 2019 06:20:56 UTC

python2-libs-2.7.15-13.ph2.x86_64.rpm | size : 5.7M , sha256 : 357807bc2186ed844b6225bdde3314ed3ac846e99c6f56894bf1a16dac3c7117 , build time : Wed, 20 Nov 2019 06:20:56 UTC

python2-devel-2.7.15-13.ph2.x86_64.rpm | size : 1.1M , sha256 : 6d6de9f2f8c2e99fb7ac877e054aeeca44a0778347bed71c16184b9fc711373b , build time : Wed, 20 Nov 2019 06:20:56 UTC

python2-tools-2.7.15-13.ph2.x86_64.rpm | size : 12K , sha256 : d3bd2547cea70e5794d9d298b6c261ae1e0b7aa78d551072a27af6f8c515ea1b , build time : Wed, 20 Nov 2019 06:20:56 UTC

postgresql-devel-9.6.14-2.ph2.x86_64.rpm | size : 1.2M , sha256 : 2e9c7023a9ce406697348e9f79e74ed95b87dd819490cd7b37352052cb8c2936 , build time : Wed, 20 Nov 2019 06:33:16 UTC

postgresql-libs-9.6.14-2.ph2.x86_64.rpm | size : 1.2M , sha256 : 0aff1b4edf27f7b16c302697cb4209f8547e8783cfe7aa2a50f60ceca52817fa , build time : Wed, 20 Nov 2019 06:33:16 UTC

postgresql-9.6.14-2.ph2.x86_64.rpm | size : 5.8M , sha256 : 291e2bd651393e0f2d3d29aea6307bff88bda1320db77032c8507b7be925d7e7 , build time : Wed, 20 Nov 2019 06:33:16 UTC

postgresql-debuginfo-9.6.14-2.ph2.x86_64.rpm | size : 572K , sha256 : 2f257e001358e4287d7ef1fa5ace20de8bc47bb4c8d6d11e011fdef904fb696a , build time : Wed, 20 Nov 2019 06:33:16 UTC

nodejs-devel-8.11.4-2.ph2.x86_64.rpm | size : 164K , sha256 : 8cf30fa3414085fea9977b1d501a4730243f512c8d6ba6bc9d4ee3a074b07f15 , build time : Wed, 20 Nov 2019 06:34:55 UTC

nodejs-debuginfo-8.11.4-2.ph2.x86_64.rpm | size : 1.6M , sha256 : 3f4eea6a47b0fb6366103bafdc964a3184f735570f8efcbdca534d372561250e , build time : Wed, 20 Nov 2019 06:34:55 UTC

nodejs-8.11.4-2.ph2.x86_64.rpm | size : 15M , sha256 : bdb5bfd72173400f1da9f1f625c525ba015be55f15db5e1a0030d806e9e6fbc1 , build time : Wed, 20 Nov 2019 06:34:55 UTC