Security Update 1.0 91

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2017-0091

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2017-12-08

Affected Release: 1.0

Details

Updates of ['openssh', 'linux', 'procmail', 'rsync', 'glibc', 'mongodb', 'linux-esx', 'binutils', 'python2', 'zookeeper'] packages of Photon OS have been released.

Affected Packages

Critical

procmail - ['CVE-2017-16844']

rsync - ['CVE-2017-16548']

mongodb - ['CVE-2017-15535']

python2 - ['CVE-2017-1000158']

Important

linux - ['CVE-2017-7518', 'CVE-2017-15115']

glibc - ['CVE-2016-5417']

linux-esx - ['CVE-2017-7518', 'CVE-2017-15115']

binutils - ['CVE-2017-16827', 'CVE-2017-16828', 'CVE-2017-16831', 'CVE-2017-16832', 'CVE-2017-16830', 'CVE-2017-16826', 'CVE-2017-16829']

zookeeper - ['CVE-2017-5637']

Moderate

openssh - ['CVE-2017-15906']

linux - ['CVE-2017-16994', 'CVE-2017-16646', 'CVE-2017-16650', 'CVE-2017-16537', 'CVE-2017-18203', 'CVE-2017-16536', 'CVE-2017-9150', 'CVE-2017-16649']

linux-esx - ['CVE-2017-16994', 'CVE-2017-16646', 'CVE-2017-16650', 'CVE-2017-16537', 'CVE-2017-18203', 'CVE-2017-16536', 'CVE-2017-9150', 'CVE-2017-16649']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux', 'glibc', 'linux-esx'] after updating, a reboot is required for taking effect.

Updated Packages Information

openssh-debuginfo-7.4p1-7.ph1.x86_64.rpm | size : 4.3M , sha256 : 9a647b813e30bccdebbe74e175a4fb3cde2ba78be236027168aad0ffe6586954 , build time : Thu, 07 Dec 2017 03:17:07 UTC

openssh-7.4p1-7.ph1.x86_64.rpm | size : 2.0M , sha256 : 44298708e2e34fa6bb2cf16cc38dd764f5dfdf4630cab36640949c86a6db823c , build time : Thu, 07 Dec 2017 03:17:07 UTC

linux-esx-4.4.103-1.ph1.x86_64.rpm | size : 7.5M , sha256 : fb1f3b25d2e209e998e864e9fe41c09005bf3beff5cc654b532f291e8b4d92ea , build time : Thu, 07 Dec 2017 03:49:29 UTC

linux-4.4.103-1.ph1.x86_64.rpm | size : 18M , sha256 : d5b602071d16a14df4c445670d4ed2216a09178202a20c6150e496f7fb782c39 , build time : Thu, 07 Dec 2017 04:17:09 UTC

linux-esx-devel-4.4.103-1.ph1.x86_64.rpm | size : 9.7M , sha256 : 3830220a4c4cfa36fc0214c876ec9228041627c3575de1e3ef9c5177ff9b5a00 , build time : Thu, 07 Dec 2017 03:49:29 UTC

linux-docs-4.4.103-1.ph1.x86_64.rpm | size : 6.6M , sha256 : 7da6922089e7eddf1ebdfa500779254df1d1fa7c41681f2d672e980d8acc9998 , build time : Thu, 07 Dec 2017 04:17:09 UTC

linux-sound-4.4.103-1.ph1.x86_64.rpm | size : 256K , sha256 : 14b9715119800942c60ecceab940adacb8085daa2157e4007109a6cf5f237fce , build time : Thu, 07 Dec 2017 04:17:09 UTC

linux-tools-4.4.103-1.ph1.x86_64.rpm | size : 760K , sha256 : 35bcf19292755cfbbade97e877ce767ca89d83f5037f534d6c66e5d9698f4d88 , build time : Thu, 07 Dec 2017 04:17:09 UTC

linux-drivers-gpu-4.4.103-1.ph1.x86_64.rpm | size : 1.4M , sha256 : a3e004bb08281945a6866afa36d3b282ce22838d553c85474619468691b71005 , build time : Thu, 07 Dec 2017 04:17:09 UTC

linux-esx-debuginfo-4.4.103-1.ph1.x86_64.rpm | size : 159M , sha256 : ba3adc44cc0bc5fa23163ca05996d5715434da9d36055f714780f5381498de12 , build time : Thu, 07 Dec 2017 03:49:29 UTC

linux-oprofile-4.4.103-1.ph1.x86_64.rpm | size : 40K , sha256 : 8005fc94477ad3d4e913caa0aa0d25b88c74f74150f2d1b937435363e1f87cb1 , build time : Thu, 07 Dec 2017 04:17:09 UTC

linux-debuginfo-4.4.103-1.ph1.x86_64.rpm | size : 350M , sha256 : 4c2c51009cacce8b54d7437708366b79adf4da8cf13ea21c395a84019d932c4c , build time : Thu, 07 Dec 2017 04:17:09 UTC

linux-esx-docs-4.4.103-1.ph1.x86_64.rpm | size : 6.6M , sha256 : 679994ec465b09922e545cb88cb26b1c918d3924a0fcdd0587fdb1b1ccdc9b8f , build time : Thu, 07 Dec 2017 03:49:29 UTC

linux-api-headers-4.4.103-1.ph1.noarch.rpm | size : 1.1M , sha256 : 6ca2204cbfa2d751b44475508def187cf70e5e111e08c5bd7c1a97fd1d4be0c0 , build time : Thu, 07 Dec 2017 02:37:47 UTC

linux-dev-4.4.103-1.ph1.x86_64.rpm | size : 10M , sha256 : 61d33c9478d09fa46671c3cdf56c94fffdc327ee42df75a4fb862c32c3258032 , build time : Thu, 07 Dec 2017 04:17:09 UTC