Security Update 3.0 15

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2019-3.0-0015

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2019-05-24

Affected Release: 3.0

Details

Updates of ['linux-secure', 'mercurial', 'mysql', 'linux', 'libarchive', 'elfutils', 'kubernetes', 'linux-esx', 'keepalived', 'linux-aws'] packages of Photon OS have been released.

Affected Packages

Critical

linux-secure - ['CVE-2019-18805']

linux - ['CVE-2019-18805']

linux-esx - ['CVE-2019-18805']

linux-aws - ['CVE-2019-18805']

Important

linux-secure - ['CVE-2019-14898', 'CVE-2019-11599', 'CVE-2019-11815', 'CVE-2019-11487', 'CVE-2019-11810']

mysql - ['CVE-2019-2632']

linux - ['CVE-2019-14898', 'CVE-2019-11599', 'CVE-2019-11815', 'CVE-2019-11487', 'CVE-2019-11810']

linux-esx - ['CVE-2019-14898', 'CVE-2019-11599', 'CVE-2019-11815', 'CVE-2019-11487', 'CVE-2019-11810']

linux-aws - ['CVE-2019-14898', 'CVE-2019-11599', 'CVE-2019-11815', 'CVE-2019-11487', 'CVE-2019-11810']

Moderate

linux-secure - ['CVE-2019-3460', 'CVE-2019-15920', 'CVE-2019-3887', 'CVE-2019-9857', 'CVE-2019-20054', 'CVE-2019-15924', 'CVE-2019-3459', 'CVE-2019-15921', 'CVE-2019-15214', 'CVE-2019-20811']

mercurial - ['CVE-2019-3902']

mysql - ['CVE-2019-2694', 'CVE-2019-2606', 'CVE-2019-2584', 'CVE-2019-2587', 'CVE-2019-2607', 'CVE-2019-2644', 'CVE-2019-2686', 'CVE-2019-2624', 'CVE-2019-2614', 'CVE-2019-2685', 'CVE-2019-2683', 'CVE-2019-2681', 'CVE-2019-2688', 'CVE-2019-2695', 'CVE-2019-2593', 'CVE-2019-2630', 'CVE-2019-2636', 'CVE-2019-2689', 'CVE-2019-2623', 'CVE-2019-2617', 'CVE-2019-2566', 'CVE-2019-2592', 'CVE-2019-2627', 'CVE-2019-2687', 'CVE-2019-2625', 'CVE-2019-2626', 'CVE-2019-2620', 'CVE-2019-2580', 'CVE-2019-2628', 'CVE-2019-2589', 'CVE-2019-2596', 'CVE-2019-2581', 'CVE-2019-2634', 'CVE-2019-2693', 'CVE-2019-2585', 'CVE-2019-2635', 'CVE-2019-2631', 'CVE-2019-2691']

linux - ['CVE-2019-3460', 'CVE-2019-15920', 'CVE-2019-3887', 'CVE-2019-9857', 'CVE-2019-20054', 'CVE-2019-15924', 'CVE-2019-3459', 'CVE-2019-15921', 'CVE-2019-15214', 'CVE-2019-20811']

libarchive - ['CVE-2019-1000019', 'CVE-2018-1000879', 'CVE-2019-1000020', 'CVE-2018-1000880']

elfutils - ['CVE-2018-18520', 'CVE-2018-18521']

kubernetes - ['CVE-2019-11244']

linux-esx - ['CVE-2019-3460', 'CVE-2019-15920', 'CVE-2019-3887', 'CVE-2019-9857', 'CVE-2019-20054', 'CVE-2019-15924', 'CVE-2019-3459', 'CVE-2019-15921', 'CVE-2019-15214', 'CVE-2019-20811']

keepalived - ['CVE-2018-19044', 'CVE-2018-19046']

linux-aws - ['CVE-2019-3460', 'CVE-2019-15920', 'CVE-2019-3887', 'CVE-2019-9857', 'CVE-2019-20054', 'CVE-2019-15924', 'CVE-2019-3459', 'CVE-2019-15921', 'CVE-2019-15214', 'CVE-2019-20811']

Low

linux-secure - ['CVE-2019-15919']

linux - ['CVE-2019-15919']

linux-esx - ['CVE-2019-15919']

linux-aws - ['CVE-2019-15919']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux-secure', 'linux', 'linux-esx', 'linux-aws'] after updating, a reboot is required for taking effect.

Updated Packages Information

linux-secure-4.19.40-2.ph3.x86_64.rpm | size : 23M , sha256 : 469d2d74fa625a8c1c826b0a2dd993a62c8e027c67a680c67270467573435312 , build time : Thu, 23 May 2019 22:24:16 UTC

linux-secure-debuginfo-4.19.40-2.ph3.x86_64.rpm | size : 203M , sha256 : c993dddd06c3b4cd403c1b8d954561a1155f4415fdac9462fe0ab4f56cb185bc , build time : Thu, 23 May 2019 18:17:02 UTC

linux-secure-devel-4.19.40-2.ph3.x86_64.rpm | size : 13M , sha256 : 65ba7940e6e2556bc1c9952707d9b58b86ef4ca4d33e9f46de7898c469b2f8c9 , build time : Thu, 23 May 2019 18:17:02 UTC

linux-secure-docs-4.19.40-2.ph3.x86_64.rpm | size : 8.2M , sha256 : 10a538c2c3b8df981ae741ed63baadd92011a67e089fc5611d2da81037a8cf12 , build time : Thu, 23 May 2019 18:17:02 UTC

linux-secure-lkcm-4.19.40-2.ph3.x86_64.rpm | size : 24K , sha256 : 30bbeedaf42f04d778aab8ef3220126a4797eb4f07063149d9dc4ad0c178772a , build time : Thu, 23 May 2019 18:17:02 UTC

mercurial-4.7.1-4.ph3.x86_64.rpm | size : 5.2M , sha256 : 6bda4f2d699d6a3d9bf25ac37d1648249a792ee6ef0e9301319eaaa7cf0b02c2 , build time : Thu, 23 May 2019 17:42:00 UTC

mercurial-debuginfo-4.7.1-4.ph3.x86_64.rpm | size : 320K , sha256 : ed5dcad0dd15de30d8b697d013f928f45fc9c2be7dd4e6867429d6b3c9b56896 , build time : Thu, 23 May 2019 17:42:00 UTC

mysql-8.0.16-1.ph3.x86_64.rpm | size : 56M , sha256 : 68c4c38c63db25b9a7302284d8d2a5015ab16bf9af262ea717eeb0a17cf28a74 , build time : Thu, 23 May 2019 18:21:28 UTC

mysql-debuginfo-8.0.16-1.ph3.x86_64.rpm | size : 2.9M , sha256 : 08d51597aa3f03b058facabb7158dd7b620c914e6149d7a8ea8cbe89c9e093e9 , build time : Thu, 23 May 2019 18:21:28 UTC

mysql-devel-8.0.16-1.ph3.x86_64.rpm | size : 2.7M , sha256 : 75654baa8a599c2c37c6a16d19615f32d30313c77d44f8cd0baa532e94833964 , build time : Thu, 23 May 2019 18:21:28 UTC

linux-4.19.40-2.ph3.x86_64.rpm | size : 21M , sha256 : 7224ff1f0ca648e0c9d65ff9402c3ccd5ad41ed6c3b230817accf54502b0cde0 , build time : Thu, 23 May 2019 22:23:58 UTC

linux-api-headers-4.19.40-1.ph3.noarch.rpm | size : 1.4M , sha256 : cb37840c2b5c861d21d930b386fcbcc852b3075fa57b0952bfca7dd73f0b4f61 , build time : Thu, 23 May 2019 17:40:21 UTC

linux-aws-4.19.40-2.ph3.x86_64.rpm | size : 17M , sha256 : ed24db49e841395c65134a71edbed18f92e81b0ab83e8bdf76df1ffdd86dbf94 , build time : Thu, 23 May 2019 18:22:03 UTC

linux-aws-debuginfo-4.19.40-2.ph3.x86_64.rpm | size : 473M , sha256 : 2aa96291e9a5fd2cb5e96a2b0ddb0789f20286cbc798f0068b398fd9fb6e2fee , build time : Thu, 23 May 2019 18:22:03 UTC

linux-aws-devel-4.19.40-2.ph3.x86_64.rpm | size : 16M , sha256 : 017d504367bac362ac5627eefc45c9bcda184ffefa61c9fcd40677932fac8692 , build time : Thu, 23 May 2019 18:22:03 UTC

linux-aws-docs-4.19.40-2.ph3.x86_64.rpm | size : 8.2M , sha256 : 56caa77c0526efad45c383ef2998761224260494db3ea3da1e568527f98468ff , build time : Thu, 23 May 2019 18:22:03 UTC

linux-aws-drivers-gpu-4.19.40-2.ph3.x86_64.rpm | size : 1.5M , sha256 : 8aa8022a7a2f05c47b7325c7bb1be081bfef9eff60bcb1e62ef86417fe3609a8 , build time : Thu, 23 May 2019 18:22:03 UTC

linux-aws-oprofile-4.19.40-2.ph3.x86_64.rpm | size : 32K , sha256 : 1fb4652c49c908e5ed826474ab3a53235c2e1f9a523aa176fdf88c20bf09fd50 , build time : Thu, 23 May 2019 18:22:03 UTC

linux-aws-sound-4.19.40-2.ph3.x86_64.rpm | size : 236K , sha256 : fbe4a4580fd192b3bb7059b17548f06fa4650048ebbe4a8fa3bd2465080f16b2 , build time : Thu, 23 May 2019 18:22:03 UTC

linux-aws-tools-4.19.40-2.ph3.x86_64.rpm | size : 9.6M , sha256 : d500e9dcb5a4ad4c2949a8fd934d4a340c8c09dd83385b880aebabff8a32781d , build time : Thu, 23 May 2019 18:22:03 UTC

linux-debuginfo-4.19.40-2.ph3.x86_64.rpm | size : 551M , sha256 : 9e751777f251519fe199c0a3de05107f9ddd9d3774437a9f8855c0400ba76352 , build time : Thu, 23 May 2019 18:24:58 UTC

linux-devel-4.19.40-2.ph3.x86_64.rpm | size : 17M , sha256 : 229cdf71845fe47d239531aa4ead5b694758033f04539437a4f878b344b9f598 , build time : Thu, 23 May 2019 18:24:58 UTC

linux-docs-4.19.40-2.ph3.x86_64.rpm | size : 8.2M , sha256 : fd688aad550e508aa162003fb93cf4739afdca1aab9f0b517d2e69cb9a1b9ef4 , build time : Thu, 23 May 2019 18:24:58 UTC

linux-drivers-gpu-4.19.40-2.ph3.x86_64.rpm | size : 1.5M , sha256 : 1ce30f627b70874d1aca553bd80aa7033e43df241a05285bd61d45ba2be4bd6a , build time : Thu, 23 May 2019 18:24:58 UTC

linux-drivers-sound-4.19.40-2.ph3.x86_64.rpm | size : 528K , sha256 : ccb818fdfa344156510b42a6cf33fabadb22fcc9a8615699fc156b313cabf7bb , build time : Thu, 23 May 2019 18:24:58 UTC

linux-esx-4.19.40-2.ph3.x86_64.rpm | size : 8.5M , sha256 : 40be2b8d5ecf735e7c326b14817169758e45f4d9b16cebc75eca66a852efbcc2 , build time : Thu, 23 May 2019 22:24:08 UTC

linux-esx-debuginfo-4.19.40-2.ph3.x86_64.rpm | size : 244M , sha256 : 0ba375b9800c7572d58715235a786a554982c988e8697c5e03959149f1a8a6e4 , build time : Thu, 23 May 2019 18:21:09 UTC

linux-esx-devel-4.19.40-2.ph3.x86_64.rpm | size : 12M , sha256 : 7c951990a238633cbb9064fab639c7b4bda1b5b1e15b3fdf3a1c4478583216a4 , build time : Thu, 23 May 2019 18:21:09 UTC

linux-esx-docs-4.19.40-2.ph3.x86_64.rpm | size : 8.2M , sha256 : 2903c984874648da8649b9c3418b698fb6b2dcf834d5fdd52207ad81e5fe5273 , build time : Thu, 23 May 2019 18:21:09 UTC

linux-oprofile-4.19.40-2.ph3.x86_64.rpm | size : 44K , sha256 : 26a1fb062778b2f85a46557013bb9896236f2fd95d68cdf0fead4dcbe619a0b0 , build time : Thu, 23 May 2019 18:24:58 UTC

linux-secure-4.19.40-2.ph3.x86_64.rpm | size : 23M , sha256 : 469d2d74fa625a8c1c826b0a2dd993a62c8e027c67a680c67270467573435312 , build time : Thu, 23 May 2019 22:24:16 UTC

linux-secure-debuginfo-4.19.40-2.ph3.x86_64.rpm | size : 203M , sha256 : c993dddd06c3b4cd403c1b8d954561a1155f4415fdac9462fe0ab4f56cb185bc , build time : Thu, 23 May 2019 18:17:02 UTC

linux-secure-devel-4.19.40-2.ph3.x86_64.rpm | size : 13M , sha256 : 65ba7940e6e2556bc1c9952707d9b58b86ef4ca4d33e9f46de7898c469b2f8c9 , build time : Thu, 23 May 2019 18:17:02 UTC

linux-secure-docs-4.19.40-2.ph3.x86_64.rpm | size : 8.2M , sha256 : 10a538c2c3b8df981ae741ed63baadd92011a67e089fc5611d2da81037a8cf12 , build time : Thu, 23 May 2019 18:17:02 UTC

linux-secure-lkcm-4.19.40-2.ph3.x86_64.rpm | size : 24K , sha256 : 30bbeedaf42f04d778aab8ef3220126a4797eb4f07063149d9dc4ad0c178772a , build time : Thu, 23 May 2019 18:17:02 UTC

linux-tools-4.19.40-2.ph3.x86_64.rpm | size : 9.6M , sha256 : 4d2c72a44a1a1931c9cb8259017f36612be6abe55f8f40ae3e1ecd8b294991e7 , build time : Thu, 23 May 2019 18:24:58 UTC

libarchive-3.3.3-3.ph3.x86_64.rpm | size : 372K , sha256 : aee93a0d746f500548b4ff81eefb7bfd9760e6e808da09cbdc87e063f370c42a , build time : Thu, 23 May 2019 17:44:14 UTC

libarchive-debuginfo-3.3.3-3.ph3.x86_64.rpm | size : 1.6M , sha256 : 8c6e0a6c597eab46dcd64473d2d9cb0b5d7c712b87cb26b3d648bf37f1283a88 , build time : Thu, 23 May 2019 17:44:14 UTC

libarchive-devel-3.3.3-3.ph3.x86_64.rpm | size : 164K , sha256 : af84eb9ce5b8d54502d771a6577845e28856dd7150d52d1f5247c175cc3f8b17 , build time : Thu, 23 May 2019 17:44:14 UTC

elfutils-0.174-3.ph3.x86_64.rpm | size : 712K , sha256 : e278db778e51c4eb1d2f3dd31bf2626cdb46106378d315d949423c567420f1d4 , build time : Thu, 23 May 2019 17:41:03 UTC

elfutils-debuginfo-0.174-3.ph3.x86_64.rpm | size : 3.0M , sha256 : 6990a943118444089c6658cbea9a726895068c72ba67e3fc21ac4d982cefcb63 , build time : Thu, 23 May 2019 17:41:03 UTC

elfutils-devel-0.174-3.ph3.x86_64.rpm | size : 96K , sha256 : 4089852c297781aa110776beed6381162c4799d35e2e228e0414ea5e366c68de , build time : Thu, 23 May 2019 17:41:03 UTC

elfutils-devel-static-0.174-3.ph3.x86_64.rpm | size : 220K , sha256 : 9f57495f232f8396ebd0915977fccaf467f7b8e1e557e5a050b571158dd956a9 , build time : Thu, 23 May 2019 17:41:03 UTC

elfutils-libelf-0.174-3.ph3.x86_64.rpm | size : 80K , sha256 : f3e7a86b7da62d9e25852ecaa6898e320af6db3c382c03be30ddf7491f00e5aa , build time : Thu, 23 May 2019 17:41:03 UTC

elfutils-libelf-devel-0.174-3.ph3.x86_64.rpm | size : 40K , sha256 : 9dbc58b5a937c6f2b597b64094e9c3492b35ca64a9a11895a037557d3d9d978c , build time : Thu, 23 May 2019 17:41:03 UTC

elfutils-libelf-devel-static-0.174-3.ph3.x86_64.rpm | size : 88K , sha256 : e076ad156d98d96e586001f8efa1e82c06fb5f54676371522f45f6b456a6c4a3 , build time : Thu, 23 May 2019 17:41:03 UTC

elfutils-libelf-lang-0.174-3.ph3.x86_64.rpm | size : 256K , sha256 : 3f4dbc924ccc1c7333e9f2c25b791496da6f43f2dc15ea49eb14c5330d50cb9a , build time : Thu, 23 May 2019 17:41:03 UTC

kubernetes-1.12.7-2.ph3.x86_64.rpm | size : 185M , sha256 : 9e731a01adc32126d922076cab88f46f2acd2d715820ab02076237f3f15daced , build time : Thu, 23 May 2019 18:00:59 UTC

kubernetes-debuginfo-1.12.7-2.ph3.x86_64.rpm | size : 122M , sha256 : 9a43efc762fa6b53781a1acac377aaf17bd109665284dd679e5eb528e24ac9dd , build time : Thu, 23 May 2019 18:00:59 UTC

kubernetes-kubeadm-1.12.7-2.ph3.x86_64.rpm | size : 11M , sha256 : 56cf284cb933af5ba36163c02d42aa09ddddfd9e026f3436efedcb12c16c39c2 , build time : Thu, 23 May 2019 18:00:59 UTC

kubernetes-kubectl-extras-1.12.7-2.ph3.x86_64.rpm | size : 50M , sha256 : ff462d7f3d4145bb83de00b1d93b13a9478a61402afd1f3b4bf936cfeff7da57 , build time : Thu, 23 May 2019 18:00:59 UTC

kubernetes-pause-1.12.7-2.ph3.x86_64.rpm | size : 284K , sha256 : bdae301d7a7db2540ca343efd95098758bf2ec31bd2f6ee1baeedc39e3816a5f , build time : Thu, 23 May 2019 18:00:59 UTC

linux-esx-4.19.40-2.ph3.x86_64.rpm | size : 8.5M , sha256 : 40be2b8d5ecf735e7c326b14817169758e45f4d9b16cebc75eca66a852efbcc2 , build time : Thu, 23 May 2019 22:24:08 UTC

linux-esx-debuginfo-4.19.40-2.ph3.x86_64.rpm | size : 244M , sha256 : 0ba375b9800c7572d58715235a786a554982c988e8697c5e03959149f1a8a6e4 , build time : Thu, 23 May 2019 18:21:09 UTC

linux-esx-devel-4.19.40-2.ph3.x86_64.rpm | size : 12M , sha256 : 7c951990a238633cbb9064fab639c7b4bda1b5b1e15b3fdf3a1c4478583216a4 , build time : Thu, 23 May 2019 18:21:09 UTC

linux-esx-docs-4.19.40-2.ph3.x86_64.rpm | size : 8.2M , sha256 : 2903c984874648da8649b9c3418b698fb6b2dcf834d5fdd52207ad81e5fe5273 , build time : Thu, 23 May 2019 18:21:09 UTC

keepalived-2.0.16-1.ph3.x86_64.rpm | size : 412K , sha256 : 30d01a28d6de00fc8b58005926af1f3446973b8bb0fe41081d1f0e6b58cb058c , build time : Thu, 23 May 2019 17:44:54 UTC

keepalived-debuginfo-2.0.16-1.ph3.x86_64.rpm | size : 1.8M , sha256 : 8d45c46102a4540d170c31c0d49b1e791834f9f1c62099e02771bd6f3441791e , build time : Thu, 23 May 2019 17:44:54 UTC