Security Update 2.0 200

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2020-0200

Type : Security

Severity : ['Important', 'Moderate']

Issue date : 2020-01-14

Affected Release: 2.0

Details

Updates of ['go', 'yarn', 'sudo', 'apache-tomcat', 'sqlite'] packages of Photon OS have been released.

Affected Packages

Important

go - ['CVE-2019-17596', 'CVE-2019-16276']

yarn - ['CVE-2019-10773']

sudo - ['CVE-2019-19234', 'CVE-2019-19232']

apache-tomcat - ['CVE-2019-17563', 'CVE-2019-12418']

sqlite - ['CVE-2019-20218', 'CVE-2019-19880']

Moderate

sqlite - ['CVE-2019-19645']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

go-1.11.13-2.ph2.x86_64.rpm | size : 149M , sha256 : 9e93a938899eef7772dd931a9143757c649ec3ae40f70bd5e8f20a94a56851df , build time : Thu, 09 Jan 2020 02:58:20 UTC

yarn-1.10.1-5.ph2.x86_64.rpm | size : 32M , sha256 : 150cff04e634c0f462c599efe8266a6f9cdb278c272f60e839bf14ff19583729 , build time : Thu, 09 Jan 2020 03:03:57 UTC

sudo-1.8.30-1.ph2.x86_64.rpm | size : 1.4M , sha256 : 27cfa7a235f0a5e64d0591cd69d99f97802e34e1c64f25b9123a851c615cdca4 , build time : Thu, 09 Jan 2020 02:53:38 UTC

apache-tomcat-8.5.50-1.ph2.noarch.rpm | size : 8.0M , sha256 : 54616c29b2b7efce46d3be0c3f135b5b3a1cebb3fb8619340083a2946b1f31e6 , build time : Thu, 09 Jan 2020 02:53:09 UTC

sqlite-devel-3.30.1-1.ph2.x86_64.rpm | size : 160K , sha256 : acfbdb3ff68bfecd44b3b354aa68e579c232b00966251bc3beac201d078851d6 , build time : Thu, 09 Jan 2020 02:47:52 UTC

sqlite-3.30.1-1.ph2.x86_64.rpm | size : 728K , sha256 : 2011910bdd513183587c2531df80afc94832ab3df1f79b091bc62dfd6a579d46 , build time : Thu, 09 Jan 2020 02:47:52 UTC

sqlite-libs-3.30.1-1.ph2.x86_64.rpm | size : 612K , sha256 : b9c1f77f771ee3fadde76349f78fcb502cf456263814c7747334223deef6a5b7 , build time : Thu, 09 Jan 2020 02:47:52 UTC