Security Update 1.0 126

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2018-0126

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2018-04-24

Affected Release: 1.0

Details

Updates of ['httpd', 'strongswan', 'paramiko', 'python3', 'patch', 'mercurial', 'xerces-c', 'pycrypto', 'sqlite- autoconf', 'binutils', 'mysql', 'net-snmp'] packages of Photon OS have been released.

Affected Packages

Critical

paramiko - ['CVE-2018-7750']

mercurial - ['CVE-2018-1000132']

xerces-c - ['CVE-2017-12627']

net-snmp - ['CVE-2018-1000116']

Important

httpd - ['CVE-2017-15710', 'CVE-2017-15715', 'CVE-2018-1303']

strongswan - ['CVE-2017-9023', 'CVE-2017-9022']

patch - ['CVE-2018-6951']

pycrypto - ['CVE-2018-6594']

sqlite-autoconf - ['CVE-2018-8740']

binutils - ['CVE-2018-7643', 'CVE-2018-7208']

Moderate

httpd - ['CVE-2018-1301', 'CVE-2018-1302']

python3 - ['CVE-2017-18207', 'CVE-2018-1000117']

mysql - ['CVE-2018-2573', 'CVE-2018-2640', 'CVE-2018-2612', 'CVE-2018-2668', 'CVE-2018-2583', 'CVE-2018-2622', 'CVE-2018-2665', 'CVE-2018-2703']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

httpd-devel-2.4.33-1.ph1.x86_64.rpm | size : 192K , sha256 : 10478f2ed71a4e3a3e5c13404966e84e6201a2173a0d3942d3d20774fbbc7d30 , build time : Mon, 23 Apr 2018 22:51:23 UTC

httpd-tools-2.4.33-1.ph1.x86_64.rpm | size : 20K , sha256 : be12223e7c11a4fe4bfc0c254244ae209a3c4b5109cc5d4a28a7d217311ee35e , build time : Mon, 23 Apr 2018 22:51:23 UTC

httpd-debuginfo-2.4.33-1.ph1.x86_64.rpm | size : 4.9M , sha256 : 8acfd22f085fb6d3a8e9fa3cde810cd7c3d9abe3f6cf0cb858653612bf87c67f , build time : Mon, 23 Apr 2018 22:51:23 UTC

httpd-docs-2.4.33-1.ph1.x86_64.rpm | size : 5.3M , sha256 : 278e449b1aedc310bbd4b8e4084ab9b6ca23c923a20694c652b3f95f5d98a013 , build time : Mon, 23 Apr 2018 22:51:23 UTC

httpd-2.4.33-1.ph1.x86_64.rpm | size : 1.9M , sha256 : cfe431503b9995866c9735aad993321172d58ab5ba1ccc532e9e1183da31930d , build time : Mon, 23 Apr 2018 22:51:23 UTC

httpd-devel-2.4.33-1.ph1.x86_64.rpm | size : 192K , sha256 : 10478f2ed71a4e3a3e5c13404966e84e6201a2173a0d3942d3d20774fbbc7d30 , build time : Mon, 23 Apr 2018 22:51:23 UTC

httpd-tools-2.4.33-1.ph1.x86_64.rpm | size : 20K , sha256 : be12223e7c11a4fe4bfc0c254244ae209a3c4b5109cc5d4a28a7d217311ee35e , build time : Mon, 23 Apr 2018 22:51:23 UTC

httpd-debuginfo-2.4.33-1.ph1.x86_64.rpm | size : 4.9M , sha256 : 8acfd22f085fb6d3a8e9fa3cde810cd7c3d9abe3f6cf0cb858653612bf87c67f , build time : Mon, 23 Apr 2018 22:51:23 UTC

httpd-docs-2.4.33-1.ph1.x86_64.rpm | size : 5.3M , sha256 : 278e449b1aedc310bbd4b8e4084ab9b6ca23c923a20694c652b3f95f5d98a013 , build time : Mon, 23 Apr 2018 22:51:23 UTC

httpd-2.4.33-1.ph1.x86_64.rpm | size : 1.9M , sha256 : cfe431503b9995866c9735aad993321172d58ab5ba1ccc532e9e1183da31930d , build time : Mon, 23 Apr 2018 22:51:23 UTC

strongswan-5.5.2-1.ph1.x86_64.rpm | size : 1.1M , sha256 : 6955e8894f41e378a8ccb486cd6581ed2ec687c32f4384ebe6fd43e56e1e76e8 , build time : Mon, 23 Apr 2018 22:48:17 UTC

strongswan-debuginfo-5.5.2-1.ph1.x86_64.rpm | size : 7.2M , sha256 : c400546664a85b5cc7bf2ffd70f12fc8aca3d1be14198f4b275c47d840273588 , build time : Mon, 23 Apr 2018 22:48:17 UTC

paramiko-1.17.6-1.ph1.noarch.rpm | size : 356K , sha256 : d0dda6ca47519431bee24b68be61c339862924bfb297afab7b52922efe450ae6 , build time : Mon, 23 Apr 2018 22:43:07 UTC

python3-debuginfo-3.5.4-2.ph1.x86_64.rpm | size : 7.2M , sha256 : fb3f36acc9a832bce9ca86ed0933c3886bd04119a403998d26f5bcbc486ca98e , build time : Mon, 23 Apr 2018 22:36:54 UTC

python3-3.5.4-2.ph1.x86_64.rpm | size : 1.1M , sha256 : 823e655b06e5a0cad1d796ad0e600c9ca59d37aff52c2608751140dd2c693de7 , build time : Mon, 23 Apr 2018 22:36:54 UTC

python3-libs-3.5.4-2.ph1.x86_64.rpm | size : 9.8M , sha256 : d03687c6adb344554868e84dc0e2e25ae7bd9c6169f755255339c4bc54c9ddd8 , build time : Mon, 23 Apr 2018 22:36:54 UTC

python3-tools-3.5.4-2.ph1.x86_64.rpm | size : 168K , sha256 : 832fbfd9fd107fa540eacbc185294a3291fa5e61bcde3aec7482fbca70d7207b , build time : Mon, 23 Apr 2018 22:36:54 UTC

python3-devel-3.5.4-2.ph1.x86_64.rpm | size : 156K , sha256 : 79c8004016efe463399b0710716e553b5b4e31b203fa5468ecf1cf2c40a99d9a , build time : Mon, 23 Apr 2018 22:36:54 UTC

patch-2.7.5-3.ph1.x86_64.rpm | size : 104K , sha256 : e703435615ccb145d9a95152dbab0fd7b5f6d09b6f0da512f623408e30499b62 , build time : Mon, 23 Apr 2018 22:31:44 UTC

patch-debuginfo-2.7.5-3.ph1.x86_64.rpm | size : 376K , sha256 : 0b967ae05d99e2f10fe1784874aab1cbc4912e3c9ec1733ee54f7984d1f55eb8 , build time : Mon, 23 Apr 2018 22:31:44 UTC

mercurial-4.5.3-1.ph1.x86_64.rpm | size : 4.8M , sha256 : b703a98119ef8792ec81a6dd6bb86be3561ce8bf7aa9432ffa96679d47b20bd4 , build time : Mon, 23 Apr 2018 22:39:01 UTC

mercurial-debuginfo-4.5.3-1.ph1.x86_64.rpm | size : 216K , sha256 : 18df7b7823ec6325f16d4bd6614fd33b975c48496f2ecc394c10f6912da571de , build time : Mon, 23 Apr 2018 22:39:01 UTC

xerces-c-debuginfo-3.2.1-1.ph1.x86_64.rpm | size : 8.1M , sha256 : 41262e0d351bb185d1a056e5019260b764dc24681d83a2edb2b0b4a568619572 , build time : Mon, 23 Apr 2018 22:43:19 UTC

xerces-c-devel-3.2.1-1.ph1.x86_64.rpm | size : 2.9M , sha256 : 5bf91a90273ff2269e583c7011bd601f2b4a75169214df4fe4be22e81c51e319 , build time : Mon, 23 Apr 2018 22:43:19 UTC

xerces-c-3.2.1-1.ph1.x86_64.rpm | size : 1.4M , sha256 : a5a136bf014b3f42defaf69f46cc18539b2ee3dabb57efc1bc563e2bb9f40290 , build time : Mon, 23 Apr 2018 22:43:19 UTC

pycrypto-debuginfo-2.6.1-5.ph1.x86_64.rpm | size : 44K , sha256 : 49ed89e41f97901efd4dbcae57562ccb53ad3e3dce39901144cf82f21ac38397 , build time : Mon, 23 Apr 2018 22:41:20 UTC

pycrypto-2.6.1-5.ph1.x86_64.rpm | size : 684K , sha256 : 9389c05e24e44bdae4eeed0feb973905829d039c2ef3239545d6910a59a779d1 , build time : Mon, 23 Apr 2018 22:41:20 UTC

sqlite-autoconf-debuginfo-3.22.0-2.ph1.x86_64.rpm | size : 4.4M , sha256 : 2ff2326169f9ee5de7d3598eeef45d21893d77ca26b515b4996738dcffd8acda , build time : Mon, 23 Apr 2018 22:32:45 UTC

sqlite-autoconf-3.22.0-2.ph1.x86_64.rpm | size : 1.2M , sha256 : 2b52068723749ce59a9e3bcb69d39fe7bc6dd7bfe87dbef57ad4d1907a3cdd24 , build time : Mon, 23 Apr 2018 22:32:45 UTC

binutils-2.30-3.ph1.x86_64.rpm | size : 7.9M , sha256 : 81fc0d2bdaf7c6bce74fe822c40b9fdb4ec202f4ed2d5aa439e3f6323f81677d , build time : Mon, 23 Apr 2018 22:29:44 UTC

binutils-devel-2.30-3.ph1.x86_64.rpm | size : 780K , sha256 : d0959eeb5b43f7960fe30647c8569c04ede4fc059987b38cdcb442447a465240 , build time : Mon, 23 Apr 2018 22:29:44 UTC

binutils-debuginfo-2.30-3.ph1.x86_64.rpm | size : 44M , sha256 : 3d3d9c4179b2248010adc06e800ac08c06d9ce3279579be25eb23eb03cad5652 , build time : Mon, 23 Apr 2018 22:29:44 UTC

mysql-devel-5.7.21-1.ph1.x86_64.rpm | size : 1.9M , sha256 : 43b0c1d7a192ee8e2de161b36fa6d5182ff23448e0480b8c6721c04f67dd1603 , build time : Mon, 23 Apr 2018 23:00:06 UTC

mysql-debuginfo-5.7.21-1.ph1.x86_64.rpm | size : 3.0M , sha256 : 47e76bd566c3a717cb75133b3dd3b20166ce8632e8f66ed37144f577c016ea61 , build time : Mon, 23 Apr 2018 23:00:06 UTC

mysql-5.7.21-1.ph1.x86_64.rpm | size : 51M , sha256 : 8381d2447aea74e6ad46bba349ba9ce20b433f0baf6b240be17a5a6bf1004355 , build time : Mon, 23 Apr 2018 23:00:06 UTC

net-snmp-5.7.3-5.ph1.x86_64.rpm | size : 2.6M , sha256 : 53ebe303558c5167baef57939407e188ba666ee22c31893b70507052de90efb2 , build time : Mon, 23 Apr 2018 22:52:23 UTC

net-snmp-debuginfo-5.7.3-5.ph1.x86_64.rpm | size : 4.3M , sha256 : dc60ee387367ea360e2ae108bd2a5d38920a02b77e3c1871094c74681d7aeba1 , build time : Mon, 23 Apr 2018 22:52:23 UTC

net-snmp-devel-5.7.3-5.ph1.x86_64.rpm | size : 2.3M , sha256 : 6cf2217923120f95c96b6295a9774150c7ac0b73172216381df516a92ecbce2a , build time : Mon, 23 Apr 2018 22:52:23 UTC