Security Updates 3.0 0002

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2019-3.0-0002
Type : Security
Severity : {'Important', 'Critical', 'Moderate'}
Issued on : 2019-02-26
Affected Versions : Photon OS 3.0

Details

An update of {'curl', 'libtiff', 'libgd', 'elasticsearch', 'kibana', 'nginx'} packages of Photon OS has been released.

Affected Packages:

Critical

curl - ['CVE-2019-3822', 'CVE-2019-3823']
kibana - ['CVE-2018-17246', 'CVE-2018-17245']

Important

libtiff - ['CVE-2019-6128']
libgd - ['CVE-2019-6977']

Moderate

curl - ['CVE-2018-16890']
nginx - ['CVE-2018-16845']
elasticsearch - ['CVE-2018-17244']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

curl-7.61.1-3.ph3.x86_64.rpm , sha256 : 26f1b21fa73f2cc92fb1091ffb9d84b4081f408f34ce2641ece65fc7f4af8fd9 , size : 180K , build_date : Mon, 25 Feb 2019 14:45:29 UTC
curl-debuginfo-7.61.1-3.ph3.x86_64.rpm , sha256 : f0fce6760481fe24c0446a343e3b560069548100acbaaa0a92e35dba32aab04e , size : 36K , build_date : Mon, 25 Feb 2019 14:45:29 UTC
curl-devel-7.61.1-3.ph3.x86_64.rpm , sha256 : 296161c28031fa5d3fea397eb442650247778cc6a0abbf12be5ed599ec4b4b6e , size : 688K , build_date : Mon, 25 Feb 2019 14:45:29 UTC
curl-libs-7.61.1-3.ph3.x86_64.rpm , sha256 : ffdcf51f748d13a71e80c6180dc20038e18b9901af204a9dc2c7bc828fad7810 , size : 251K , build_date : Mon, 25 Feb 2019 14:45:29 UTC
libtiff-4.0.10-3.ph3.x86_64.rpm , sha256 : 5007d8185fe8eb1b076e9a393f4ac33d6a50cf0aba4a11c18e5661c866a50ea2 , size : 426K , build_date : Mon, 25 Feb 2019 14:44:43 UTC
libtiff-devel-4.0.10-3.ph3.x86_64.rpm , sha256 : 8940eb89eb1b72c708b310010a8eda37439093cfd2d2e9708ce6c128f6d6fc81 , size : 562K , build_date : Mon, 25 Feb 2019 14:44:43 UTC
libtiff-debuginfo-4.0.10-3.ph3.x86_64.rpm , sha256 : 0294b13652609988a3135f8591ee3ab95085ab8260c2ef2f7eccd6d6750a87ed , size : 1.2M , build_date : Mon, 25 Feb 2019 14:44:43 UTC
libgd-2.2.5-4.ph3.x86_64.rpm , sha256 : 8e6c5e517d6027bea9a53522ba2de8647b3c9d678ecb6bcdd87ac498d8728d07 , size : 151K , build_date : Mon, 25 Feb 2019 15:03:04 UTC
libgd-debuginfo-2.2.5-4.ph3.x86_64.rpm , sha256 : d433ac0dd7ba216baa9d2c14131f651107d15b4a1bab83b79a02933dcb0eb2b2 , size : 492K , build_date : Mon, 25 Feb 2019 15:03:04 UTC
libgd-devel-2.2.5-4.ph3.x86_64.rpm , sha256 : 999262b8ae6226184e9b3d476920815affe87a5708c6ad4dc1c17ec846f8e7bd , size : 38K , build_date : Mon, 25 Feb 2019 15:03:04 UTC
elasticsearch-6.4.3-1.ph3.x86_64.rpm , sha256 : 7b7ae58943c414ed3ba555eafe80eecb9df96a3217ce82abc0edb7eb554725b6 , size : 33M , build_date : Mon, 25 Feb 2019 15:12:56 UTC
kibana-6.4.3-1.ph3.x86_64.rpm , sha256 : e067bac5953bfe81ac7cee2887b3e3c864303de502fbc842a19d56edb58c8bf6 , size : 61M , build_date : Mon, 25 Feb 2019 16:22:22 UTC
nginx-debuginfo-1.15.3-4.ph3.x86_64.rpm , sha256 : 539ca429d7115f0296de110b3ca0cf98e8be371d0937419b60799446e6151cec , size : 4.4M , build_date : Mon, 25 Feb 2019 14:44:37 UTC
nginx-1.15.3-4.ph3.x86_64.rpm , sha256 : 59d30b685f1edce02fd98cd3c12ef3122aa0fec2061fe4e26c5dc203f973e660 , size : 542K , build_date : Mon, 25 Feb 2019 14:44:37 UTC