Security Updates 1.0 298

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2020-1.0-0298
Type : Security
Severity : {'Important', 'Critical', 'Moderate'}
Issued on : 2020-06-03
Affected Versions : Photon OS 1.0

Details

An update of {'bindutils', 'sqlite-autoconf', 'apache-ant', 'apache-tomcat', 'json-c', 'nodejs', 'glibc'} packages of Photon OS has been released.

Affected Packages:

Critical

apache-tomcat - ['CVE-2020-9484']
sqlite-autoconf - ['CVE-2020-13630']
apache-ant - ['CVE-2020-1945']

Important

bindutils - ['CVE-2020-8617', 'CVE-2020-8616']
sqlite-autoconf - ['CVE-2020-13631', 'CVE-2020-13632', 'CVE-2020-13434', 'CVE-2020-13435']
json-c - ['CVE-2020-12762']
glibc - ['CVE-2020-1752']

Moderate

nodejs - ['CVE-2018-0734']

Solution

Update the affected packages (tdnf update package)
Note: For packages ['glibc'] after updating, a reboot is required for taking effect.

Updated Packages Information

bindutils-9.16.3-1.ph1.x86_64.rpm , sha256 : 65614aba304565474d016e34cc6bda28e449d57da453a25b0393d041e0dda81c , size : 3.4M , build_date : Wed, 03 Jun 2020 03:14:43 UTC
sqlite-autoconf-3.32.1-1.ph1.x86_64.rpm , sha256 : 2a41d3b2ad9454ec6123117fae7480289df1cf1943e8d1fb2dae19b2176bae44 , size : 1.5M , build_date : Wed, 03 Jun 2020 02:58:05 UTC
apache-ant-1.10.8-1.ph1.noarch.rpm , sha256 : 1f507405f0bb6ca5a0ecd11723e38040d64e60795c8fd558817380fa0cadfe8a , size : 3.4M , build_date : Wed, 03 Jun 2020 03:09:18 UTC
apache-tomcat-8.5.51-2.ph1.noarch.rpm , sha256 : 4666a30c2f9cd5285e370d327156595507c3988263e38d33e11dfe86b7819852 , size : 8.1M , build_date : Wed, 03 Jun 2020 03:11:51 UTC
json-c-devel-0.13.1-1.ph1.x86_64.rpm , sha256 : 29d1ea9d0fb5bad0ade646d688555f95c2de7428482537ee887e0448337f8a31 , size : 30K , build_date : Wed, 03 Jun 2020 03:08:54 UTC
json-c-0.13.1-1.ph1.x86_64.rpm , sha256 : bf36c69f670976bdfa65547baea4801baabb959f3a66e87022e72eaaffee5722 , size : 66K , build_date : Wed, 03 Jun 2020 03:08:54 UTC
nodejs-8.11.4-4.ph1.x86_64.rpm , sha256 : bd2793032c31d4c5bc556bbb11e9aa76fe0411766c0f22a060c3137ae17851ee , size : 15M , build_date : Wed, 03 Jun 2020 03:19:07 UTC
nodejs-devel-8.11.4-4.ph1.x86_64.rpm , sha256 : feb527745b19807830632bc1a75bf6d5a58629f4bae5017d26436dcf0b4483f0 , size : 161K , build_date : Wed, 03 Jun 2020 03:19:07 UTC
glibc-devel-2.22-28.ph1.x86_64.rpm , sha256 : bd5113e4ef2e6d6e67abe6348a2cda1e7bce970186098131071061d26b7e4e87 , size : 12M , build_date : Wed, 03 Jun 2020 02:55:19 UTC
glibc-lang-2.22-28.ph1.x86_64.rpm , sha256 : df8705ae4cc6c58a9f933344fee66ec271d1026ecada27a72a1ee10cb1996d74 , size : 1.4M , build_date : Wed, 03 Jun 2020 02:55:19 UTC
glibc-2.22-28.ph1.x86_64.rpm , sha256 : 770f8dbcad692e6a3ba57b15ac780112a829f5c4774a1faaaf5a034322494d4c , size : 19M , build_date : Wed, 03 Jun 2020 02:55:19 UTC