Security Updates 2 254

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2020-2.0-0254
Type : Security
Severity : {'Critical', 'Important'}
Issued on : 2020-06-18
Affected Versions : Photon OS 2.0

Details

An update of {'expat', 'libjpeg-turbo', 'perl', 'nghttp2'} packages of Photon OS has been released.

Affected Packages:

Critical

perl - ['CVE-2020-10878', 'CVE-2020-10543']

Important

expat - ['CVE-2019-15903']
libjpeg-turbo - ['CVE-2020-13790']
perl - ['CVE-2020-12723']
nghttp2 - ['CVE-2020-11080']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

expat-devel-2.2.9-1.ph2.x86_64.rpm , sha256 : 7aad76ef1c948aa4375feb58801edb4d76896620ebabf8c6f8f92fab4256f723 , size : 22K , build_date : Thu, 18 Jun 2020 02:49:32 UTC
expat-libs-2.2.9-1.ph2.x86_64.rpm , sha256 : ca277fa6a37d95a27317f1c66d44e25a20b87e75eb96e381672bc736df583c87 , size : 74K , build_date : Thu, 18 Jun 2020 02:49:32 UTC
expat-2.2.9-1.ph2.x86_64.rpm , sha256 : a2c2211912cbefa21026d26856fa58b3d1d5de9d8db388c8f3446efe7d302b92 , size : 35K , build_date : Thu, 18 Jun 2020 02:49:32 UTC
libjpeg-turbo-devel-2.0.0-3.ph2.x86_64.rpm , sha256 : 6736270483b0b52226111e1e58d47d21447342240b87df12f09283a2e3803849 , size : 44K , build_date : Thu, 18 Jun 2020 02:58:16 UTC
libjpeg-turbo-2.0.0-3.ph2.x86_64.rpm , sha256 : c7b57549bc2143cc14ee7fc685bbf5f2c0d90b823722c3fc63c771306ef4f769 , size : 646K , build_date : Thu, 18 Jun 2020 02:58:16 UTC
perl-5.24.1-10.ph2.x86_64.rpm , sha256 : 54d2583e047d7b1852e45b1ff24a71e3a7c88e5378c3d62d0929c7f6f1757bdd , size : 18M , build_date : Thu, 18 Jun 2020 02:52:21 UTC
nghttp2-devel-1.41.0-1.ph2.x86_64.rpm , sha256 : ff87b8717ff4094153e2e9216dd5fcd03cace2c39bf8fa47654a0f61b11045fb , size : 44K , build_date : Thu, 18 Jun 2020 02:58:52 UTC
nghttp2-1.41.0-1.ph2.x86_64.rpm , sha256 : b6e3e2d0bcc55c3cc3dcdf2a00d5e58aa4fdf493ad743dc865df3473239bd7af , size : 135K , build_date : Thu, 18 Jun 2020 02:58:52 UTC