Advisory Id : PHSA-2020-3.0-0078

Type : Security

Severity : ['Important', 'Moderate', 'Low']

Issue date : 2020-04-08

Affected Release: 3.0

Updates of ['python3', 'yarn', 'haproxy', 'libtiff', 'libvirt', 'python2', 'ansible', 'bubblewrap'] packages of Photon OS have been released.

haproxy - ['CVE-2020-11100']

ansible - ['CVE-2020-10684']

bubblewrap - ['CVE-2020-5291']

python3 - ['CVE-2020-8492']

yarn - ['CVE-2019-15608']

libtiff - ['CVE-2019-14973']

libvirt - ['CVE-2019-20485']

python2 - ['CVE-2020-8492']

ansible - ['CVE-2019-14856', 'CVE-2020-1735', 'CVE-2020-1740', 'CVE-2019-10217', 'CVE-2019-10206']

ansible - ['CVE-2020-1739', 'CVE-2020-1738']

Update the affected packages (tdnf update package)

python3-3.7.5-3.ph3.x86_64.rpm | size : 1.1M , sha256 : 7ebe05cc851e69cc1b11634e7d0eda58bb8a020f923b8a41e1fb646e57b18ce0 , build time : Wed, 08 Apr 2020 02:22:45 UTC

python3-curses-3.7.5-3.ph3.x86_64.rpm | size : 52K , sha256 : 71ce706f55422fd94902c2c65b033a852c39b9222f5650761a18d9b47213da04 , build time : Wed, 08 Apr 2020 02:22:45 UTC

python3-debuginfo-3.7.5-3.ph3.x86_64.rpm | size : 8.7M , sha256 : 9e7606e14480ce61360a4bba1c35de16146572dbd34c6aa1b34bfe276f9eac3c , build time : Wed, 08 Apr 2020 02:22:45 UTC

python3-deepmerge-0.0.5-2.ph3.noarch.rpm | size : 24K , sha256 : 8ae457792a306bf0148f77acf89208d2b4603fe602acd3e6c2a23b830f95b371 , build time : Wed, 08 Apr 2020 02:23:39 UTC

python3-devel-3.7.5-3.ph3.x86_64.rpm | size : 188K , sha256 : 1a8a288b9607fee50f74347ffad07ddd16b135fd43f3979301dcf0c59cd7b5f0 , build time : Wed, 08 Apr 2020 02:22:45 UTC

python3-libs-3.7.5-3.ph3.x86_64.rpm | size : 7.7M , sha256 : 4b9dbac16dff38e1ea72ed15ee243132836d329b6ed3ca2e9107491c6762e040 , build time : Wed, 08 Apr 2020 02:22:45 UTC

python3-pip-3.7.5-3.ph3.noarch.rpm | size : 1.3M , sha256 : a6ab3bdeadaa95d71d17b1a901efa304b0de7c16d2b7f19eede15c4dcb84d9e2 , build time : Wed, 08 Apr 2020 02:22:45 UTC

python3-setuptools-3.7.5-3.ph3.noarch.rpm | size : 556K , sha256 : 5ca2acb7ba7b4ae207d1e94a160b0481bb3b645f177616d1841460d40074d4e9 , build time : Wed, 08 Apr 2020 02:22:45 UTC

python3-test-3.7.5-3.ph3.x86_64.rpm | size : 3.7M , sha256 : fcdbf8f74803f7c7f7b7154087ad939c15bc81c571a827584d73d17c846890b1 , build time : Wed, 08 Apr 2020 02:22:45 UTC

python3-tools-3.7.5-3.ph3.x86_64.rpm | size : 172K , sha256 : fdb4a59d7a7af5bf49690540f01d65dca054eaf5f91369a232a5bb3f027575ac , build time : Wed, 08 Apr 2020 02:22:45 UTC

python3-xml-3.7.5-3.ph3.x86_64.rpm | size : 96K , sha256 : 277c1775d96b6b7d766ac7cf098f2c91031e02ace4086275dd7847ce16e1e71d , build time : Wed, 08 Apr 2020 02:22:45 UTC

yarn-1.10.1-8.ph3.noarch.rpm | size : 4.5M , sha256 : 749c2911b687623fa8b41fbff766cc1193f59107d515af8e6a740e7cadb5ec7a , build time : Wed, 08 Apr 2020 02:22:05 UTC

haproxy-2.0.10-2.ph3.x86_64.rpm | size : 852K , sha256 : 04eea80d15b713745e8d0a5354c90ba92fc6b40d64ea12e752e07f4430a406a9 , build time : Wed, 08 Apr 2020 02:23:40 UTC

haproxy-debuginfo-2.0.10-2.ph3.x86_64.rpm | size : 5.9M , sha256 : b2c93beafa4e966a744a2c07616e6696b37418519c9247b46f87b23083234908 , build time : Wed, 08 Apr 2020 02:23:40 UTC

haproxy-doc-2.0.10-2.ph3.x86_64.rpm | size : 400K , sha256 : 23e395607f2cfb5c2df96843b70aa690607f4155533a85eebb986e73ac48f19d , build time : Wed, 08 Apr 2020 02:23:40 UTC

libtiff-4.1.0-1.ph3.x86_64.rpm | size : 432K , sha256 : 9914137f2ffd165e4dfe6d35dd702111ef3fea7006489be89691424374cb82b3 , build time : Wed, 08 Apr 2020 02:19:35 UTC

libtiff-debuginfo-4.1.0-1.ph3.x86_64.rpm | size : 1.2M , sha256 : 880e2d59947977a3525374dc835da70fc4d3d287f790ea2fff4c89cd9cce5219 , build time : Wed, 08 Apr 2020 02:19:35 UTC

libtiff-devel-4.1.0-1.ph3.x86_64.rpm | size : 576K , sha256 : f5557d362816e3faa7c17bcbe973400e5d1f01a1c1df249da91bbb145a0aea13 , build time : Wed, 08 Apr 2020 02:19:35 UTC

libvirt-4.7.0-5.ph3.x86_64.rpm | size : 4.8M , sha256 : e5f4b318eb0ee4f3a84faffc6ee0adc5525d29268877fb745b3c3de104739e4d , build time : Wed, 08 Apr 2020 02:27:10 UTC

libvirt-debuginfo-4.7.0-5.ph3.x86_64.rpm | size : 18M , sha256 : abb1ea53b60eb3f8a2307724e7d53b1e33ad9b350a94433fed5fc7a4d5fadb1f , build time : Wed, 08 Apr 2020 02:27:10 UTC

libvirt-devel-4.7.0-5.ph3.x86_64.rpm | size : 216K , sha256 : 162c745ab84799353b98a2abec42cf0b06655cac6e02a9f2453f63432dde1f68 , build time : Wed, 08 Apr 2020 02:27:10 UTC

libvirt-docs-4.7.0-5.ph3.x86_64.rpm | size : 6.8M , sha256 : 521377198e6efdb7da3ba02bf2c27c63b15e5caf3f9a1831dc6b3c25881b7281 , build time : Wed, 08 Apr 2020 02:27:10 UTC

python2-2.7.17-4.ph3.x86_64.rpm | size : 736K , sha256 : a4fbbdb497556df23acee9f7e69e111bcaa9573e7a9ca2a03ef7a227656f77bf , build time : Wed, 08 Apr 2020 02:18:24 UTC

python2-debuginfo-2.7.17-4.ph3.x86_64.rpm | size : 6.0M , sha256 : c0cd4d1004a122cb88aa2b4a4f3579a7603179453fedaace8ec688fd28b1dc66 , build time : Wed, 08 Apr 2020 02:18:24 UTC

python2-devel-2.7.17-4.ph3.x86_64.rpm | size : 1.1M , sha256 : 6c1740d64446ec27dcbf1edbbdf513a4dc6521c17af621cfd7e47883eca94c05 , build time : Wed, 08 Apr 2020 02:18:24 UTC

python2-libs-2.7.17-4.ph3.x86_64.rpm | size : 5.6M , sha256 : aa56a87473fb9c20661a53129ddd541e6c16b572afa3d76685f1694778b753e9 , build time : Wed, 08 Apr 2020 02:18:24 UTC

python2-test-2.7.17-4.ph3.x86_64.rpm | size : 2.7M , sha256 : a24858bf7d3db98789925f7ac4c6973080af3448153f76afb897ee70f8fb6924 , build time : Wed, 08 Apr 2020 02:18:24 UTC

python2-tools-2.7.17-4.ph3.x86_64.rpm | size : 12K , sha256 : 0e4b963997109cf79595ceafe705817357ae18bba5cb68df2e4143fa2900c20c , build time : Wed, 08 Apr 2020 02:18:24 UTC

ansible-2.8.10-1.ph3.noarch.rpm | size : 21M , sha256 : 526b1ed22c815e1fecc442d6e77707dde38cbb049ead8ee8cc2ca8953a6fc4ae , build time : Wed, 08 Apr 2020 02:28:37 UTC

bubblewrap-0.3.0-3.ph3.x86_64.rpm | size : 32K , sha256 : 3ac70f5aca23885b8eac8c5e73c28830daeb94cd637c77aa890705ff5457f009 , build time : Wed, 08 Apr 2020 02:18:57 UTC

bubblewrap-debuginfo-0.3.0-3.ph3.x86_64.rpm | size : 88K , sha256 : be6a31c92d869b8be583cd0fd64ba581ba3e914bb0dc76bdebf7647d2fda9246 , build time : Wed, 08 Apr 2020 02:18:57 UTC