Security Update 1.0 78

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2017-0078

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2017-10-19

Affected Release: 1.0

Details

Updates of ['dosfstools', 'git', 'libgcrypt', 'mercurial', 'linux', 'mysql', 'ncurses', 'gnutls', 'dnsmasq', 'apache- tomcat', 'binutils', 'c-ares', 'linux-esx', 'nginx', 'mesos', 'libtasn1'] packages of Photon OS have been released.

Affected Packages

Critical

mercurial - ['CVE-2017-1000116']

Important

git - ['CVE-2017-14867']

mercurial - ['CVE-2017-1000115']

linux - ['CVE-2017-18270', 'CVE-2017-11472', 'CVE-2017-16526', 'CVE-2017-12154']

dnsmasq - ['CVE-2017-13704']

apache-tomcat - ['CVE-2017-12617']

binutils - ['CVE-2017-15020', 'CVE-2017-14745', 'CVE-2017-14729']

linux-esx - ['CVE-2017-18270', 'CVE-2017-11472', 'CVE-2017-16526', 'CVE-2017-12154']

mesos - ['CVE-2017-9790', 'CVE-2017-7687']

Moderate

dosfstools - ['CVE-2016-4804', 'CVE-2015-8872']

libgcrypt - ['CVE-2017-0379']

linux - ['CVE-2017-14106', 'CVE-2017-16530', 'CVE-2017-16529', 'CVE-2017-12192', 'CVE-2017-14051', 'CVE-2017-15537', 'CVE-2017-14489', 'CVE-2017-16531', 'CVE-2017-12153', 'CVE-2017-1000252', 'CVE-2017-14156', 'CVE-2017-16534', 'CVE-2017-14991']

mysql - ['CVE-2017-3634', 'CVE-2017-3652', 'CVE-2017-3638', 'CVE-2017-3637', 'CVE-2017-3643', 'CVE-2017-3644', 'CVE-2017-3640', 'CVE-2017-3635', 'CVE-2017-3529', 'CVE-2017-3647', 'CVE-2017-3645', 'CVE-2017-3642', 'CVE-2017-3649', 'CVE-2017-3641', 'CVE-2017-3651', 'CVE-2017-3633', 'CVE-2017-3648', 'CVE-2017-3650', 'CVE-2017-3639']

ncurses - ['CVE-2017-13734', 'CVE-2017-13728', 'CVE-2017-13732', 'CVE-2017-13729', 'CVE-2017-13730', 'CVE-2017-13733', 'CVE-2017-13731']

gnutls - ['CVE-2016-4456', 'CVE-2017-7507']

binutils - ['CVE-2017-12799', 'CVE-2017-14130', 'CVE-2017-14529', 'CVE-2017-12967', 'CVE-2017-13757', 'CVE-2017-13710', 'CVE-2017-14333', 'CVE-2017-14129', 'CVE-2017-14128']

c-ares - ['CVE-2017-1000381']

linux-esx - ['CVE-2017-14106', 'CVE-2017-16530', 'CVE-2017-16529', 'CVE-2017-12192', 'CVE-2017-14051', 'CVE-2017-15537', 'CVE-2017-14489', 'CVE-2017-16531', 'CVE-2017-12153', 'CVE-2017-1000252', 'CVE-2017-14156', 'CVE-2017-16534', 'CVE-2017-14991']

nginx - ['CVE-2017-7529']

libtasn1 - ['CVE-2017-10790']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux', 'linux-esx'] after updating, a reboot is required for taking effect.

Updated Packages Information

dosfstools-debuginfo-4.1-1.ph1.x86_64.rpm | size : 208K , sha256 : 6f52b1aae5b6cd8bf3bab8d49f8609adc55aa23dc991ebcc7180d74d7047ab7d , build time : Wed, 18 Oct 2017 21:49:26 UTC

dosfstools-4.1-1.ph1.x86_64.rpm | size : 100K , sha256 : a1991555775c1f3f032b212a68346b6a51a89e348466097b633475500f3c104d , build time : Wed, 18 Oct 2017 21:49:26 UTC

git-lang-2.14.2-1.ph1.x86_64.rpm | size : 1.3M , sha256 : 2a5ed6e31b9ae0364426ea3ab49e136d2877007dce9099299316b6b442c6e3e2 , build time : Wed, 18 Oct 2017 21:52:34 UTC

git-2.14.2-1.ph1.x86_64.rpm | size : 11M , sha256 : 9b8b983bbbb3b6b8316d5ee5b868442f697c5e8fb96725bdba3f3bdb1c7c76c1 , build time : Wed, 18 Oct 2017 21:52:34 UTC

git-debuginfo-2.14.2-1.ph1.x86_64.rpm | size : 30M , sha256 : 1553b009460931dda48747498cbc6b967dbd3fc4c6959b16d0010d4f62e9d24f , build time : Wed, 18 Oct 2017 21:52:34 UTC

libgcrypt-devel-1.7.6-2.ph1.x86_64.rpm | size : 28K , sha256 : 7193b2cea692a5a0fb5888db8a4ee2acd659a92a75fd4761a1133c7b6049cd36 , build time : Wed, 18 Oct 2017 21:49:48 UTC

libgcrypt-1.7.6-2.ph1.x86_64.rpm | size : 480K , sha256 : 6ab86afbdc22ef0be2e3457b9d7eb166e97fa6e5666a62e7a1683ea99e841d58 , build time : Wed, 18 Oct 2017 21:49:48 UTC

libgcrypt-debuginfo-1.7.6-2.ph1.x86_64.rpm | size : 1.6M , sha256 : ec2192292a36b986ca157dbf0e8407dddf2fbd22dc9cb8fcee66262d32d9584b , build time : Wed, 18 Oct 2017 21:49:48 UTC

mercurial-debuginfo-4.3.3-1.ph1.x86_64.rpm | size : 832K , sha256 : da96f101209732949eb44968b3c987f60ec21a8d85b86154542f3e6f63a08048 , build time : Wed, 18 Oct 2017 21:49:37 UTC

mercurial-4.3.3-1.ph1.x86_64.rpm | size : 4.7M , sha256 : 709294e321337a77f045aba6f184453bd53ebf486283a7b014bd67d39a476eff , build time : Wed, 18 Oct 2017 21:49:37 UTC

mercurial-debuginfo-4.3.3-1.ph1.x86_64.rpm | size : 832K , sha256 : da96f101209732949eb44968b3c987f60ec21a8d85b86154542f3e6f63a08048 , build time : Wed, 18 Oct 2017 21:49:37 UTC

mercurial-4.3.3-1.ph1.x86_64.rpm | size : 4.7M , sha256 : 709294e321337a77f045aba6f184453bd53ebf486283a7b014bd67d39a476eff , build time : Wed, 18 Oct 2017 21:49:37 UTC

linux-sound-4.4.92-1.ph1.x86_64.rpm | size : 252K , sha256 : 86c6427f8c2351aa69d95233d2b2837439fb2ef84fe0af0891da938596e33c75 , build time : Wed, 18 Oct 2017 22:56:49 UTC

linux-api-headers-4.4.92-1.ph1.noarch.rpm | size : 1.1M , sha256 : ec153a80dbea6163ebad43ca764a229eeb4602623fa7beea9e4b48a5cb5d782b , build time : Wed, 18 Oct 2017 21:41:09 UTC

linux-docs-4.4.92-1.ph1.x86_64.rpm | size : 6.6M , sha256 : 5bd1ecba1a102a5a3d4b7fd719bb9e1fcf2c7ed2e59d6d1e21075cd7c44de3d9 , build time : Wed, 18 Oct 2017 22:56:49 UTC

linux-tools-4.4.92-1.ph1.x86_64.rpm | size : 760K , sha256 : b89cf154e8fee580760feb029a6904a2ad212f34a781b0ae912e1c52b2afcfec , build time : Wed, 18 Oct 2017 22:56:49 UTC

linux-oprofile-4.4.92-1.ph1.x86_64.rpm | size : 40K , sha256 : 8c6221a3baadf5e7e6e484513ab8ba05618bc83de6d25a0e628f28af1f04ce36 , build time : Wed, 18 Oct 2017 22:56:49 UTC

linux-dev-4.4.92-1.ph1.x86_64.rpm | size : 9.9M , sha256 : ba9547728cd53ea383e020962c400d59c63681e8125eec396ec6b6ed767ab180 , build time : Wed, 18 Oct 2017 22:56:49 UTC

linux-4.4.92-1.ph1.x86_64.rpm | size : 18M , sha256 : 417295511bbb8a578322526359753edd62903baf062a36bfe438d1bb6ee5c5e3 , build time : Wed, 18 Oct 2017 22:56:49 UTC

linux-drivers-gpu-4.4.92-1.ph1.x86_64.rpm | size : 1.4M , sha256 : 40c57094130b7c3f07ef1337a43071f85afda20f33740f8e28aae59004153a1b , build time : Wed, 18 Oct 2017 22:56:49 UTC

linux-debuginfo-4.4.92-1.ph1.x86_64.rpm | size : 350M , sha256 : 0cc636104e1292f9a7501371232d79aea316e61995a8978aca878d9244ec2526 , build time : Wed, 18 Oct 2017 22:56:49 UTC