Security Update 1.0 304

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2020-0304

Type : Security

Severity : ['Important', 'Moderate']

Issue date : 2020-06-27

Affected Release: 1.0

Details

Updates of ['nghttp2', 'curl', 'redis', 'python3'] packages of Photon OS have been released.

Affected Packages

Important

nghttp2 - ['CVE-2020-11080']

curl - ['CVE-2020-8177']

redis - ['CVE-2020-14147']

Moderate

python3 - ['CVE-2019-18348', 'CVE-2020-8492']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

nghttp2-1.41.0-1.ph1.x86_64.rpm | size : 132K , sha256 : bf35e37987a5b07aa9db8c2be81453c05b6b644a2b407c346446af017fbfe4f6 , build time : Fri, 26 Jun 2020 03:09:59 UTC

nghttp2-devel-1.41.0-1.ph1.x86_64.rpm | size : 44K , sha256 : 31671ad3c59b2fd4a192c371ca5ecdf85ad6f6cf7062db19a7d73877fb6931fa , build time : Fri, 26 Jun 2020 03:09:59 UTC

curl-7.59.0-10.ph1.x86_64.rpm | size : 1.1M , sha256 : 306cd66156109e41ae51da76739bf0fa143d56975872bd4fd4a3c351574b0498 , build time : Fri, 26 Jun 2020 03:10:31 UTC

redis-4.0.14-2.ph1.x86_64.rpm | size : 2.5M , sha256 : 846124e8e7a2732aad1f967bded2cc32199a0e917992103b43292710be19f7bb , build time : Fri, 26 Jun 2020 03:09:48 UTC

python3-devel-3.5.6-14.ph1.x86_64.rpm | size : 156K , sha256 : c1f3e3bc382e70bfb3cc5c80493d7d0ac838dc7fd3d0d63d1f5da57f42ccdc5c , build time : Fri, 26 Jun 2020 03:05:10 UTC

python3-3.5.6-14.ph1.x86_64.rpm | size : 1.1M , sha256 : 2d856c35b83e48c23333904104efe1a0f66957866d85bbbce45df4775fa28c8d , build time : Fri, 26 Jun 2020 03:05:10 UTC

python3-tools-3.5.6-14.ph1.x86_64.rpm | size : 168K , sha256 : decee7b1c74454b67bcc422a63d95b4bc42c57ffeeb4cf178cdc9cb13134d9cd , build time : Fri, 26 Jun 2020 03:05:10 UTC

python3-libs-3.5.6-14.ph1.x86_64.rpm | size : 8.8M , sha256 : 95d8dd95265f72698dc3edd61669167eb674541e0e33752edc6b8438232729bd , build time : Fri, 26 Jun 2020 03:05:10 UTC