Security Updates 2 13

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2018-2.0-0013
Type : Security
Severity : {'Low', 'Moderate', 'Critical', 'Important'}
Issued on : 2018-01-23
Affected Versions : Photon OS 2.0

Details

An update of {'libtiff', 'openjdk8', 'ruby'} packages of Photon OS has been released.

Affected Packages:

Critical

ruby - ['CVE-2017-17790']

Important

libtiff - ['CVE-2017-17973']
openjdk8 - ['CVE-2018-2627', 'CVE-2018-2633', 'CVE-2018-2637', 'CVE-2018-2638', 'CVE-2018-2639']

Moderate

libtiff - ['CVE-2017-18013']
openjdk8 - ['CVE-2018-2582', 'CVE-2018-2634', 'CVE-2018-2641']

Low

libtiff - ['CVE-2017-9937']
openjdk8 - ['CVE-2018-2581', 'CVE-2018-2588', 'CVE-2018-2599', 'CVE-2018-2602', 'CVE-2018-2603', 'CVE-2018-2618', 'CVE-2018-2629', 'CVE-2018-2663', 'CVE-2018-2677', 'CVE-2018-2678']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

libtiff-4.0.9-1.ph2.x86_64.rpm , sha256 : 900e5f356c8741d006598008b71699bfaf5bb0213695884340a1d7c9fb0b1816 , size : 450K , date : 2018-01-23
libtiff-devel-4.0.9-1.ph2.x86_64.rpm , sha256 : 94b525d73f30727a818f8e00c4d8a650ba783f4314ac99f4f9765d73114ec951 , size : 549K , date : 2018-01-23
libtiff-debuginfo-4.0.9-1.ph2.x86_64.rpm , sha256 : 93370272d2726ef769016f9543f172fe791fa3d42aaa1b5051806ee881e670f0 , size : 1.2M , date : 2018-01-23
openjdk8-debuginfo-1.8.0.162-1.ph2.x86_64.rpm , sha256 : 6ca6aa8fe56f689bd8415daadaedca4f9ce748bbe6a86c4abff969d8e1dc2fc2 , size : 2.3M , date : 2018-01-23
openjdk8-src-1.8.0.162-1.ph2.x86_64.rpm , sha256 : 3a620ca2f068d64ab8e2c1dadac926e57f7084ecfe9192618c822cac19766ca2 , size : 22M , date : 2018-01-23
openjdk8-doc-1.8.0.162-1.ph2.x86_64.rpm , sha256 : f3dfac566c001819bcf16c29c6ef40b0e1438addb36226d1fe5bf47d6fc9a599 , size : 2.4M , date : 2018-01-23
openjdk8-1.8.0.162-1.ph2.x86_64.rpm , sha256 : 66ad8edb3b3cab3b5919b966070d0055bb7ef286333edbabd1a2cecdbbcedf07 , size : 12M , date : 2018-01-23
openjdk8-sample-1.8.0.162-1.ph2.x86_64.rpm , sha256 : e6a142990167f64a5cc34bec81d3229c58bc38f7a76bb7bd107290f8aa11af04 , size : 456K , date : 2018-01-23
ruby-debuginfo-2.4.3-2.ph2.x86_64.rpm , sha256 : 4b5eaf9b17627828e9f5122305eca727057bdd7707d59406bf85230b11f2be2f , size : 12M , date : 2018-01-23
ruby-2.4.3-2.ph2.x86_64.rpm , sha256 : bdfbc24101978f78c638154c353f0599d991a796ac1c6e86d6d24fb906959c10 , size : 12M , date : 2018-01-23