Advisory ID : PHSA-2020-1.0-0281
Type : Security
Severity : {'Important', 'Moderate', 'Critical'}
Issued on : 2020-02-28
Affected Versions : Photon OS 1.0

An update of {'unzip', 'envoy', 'ncurses'} packages of Photon OS has been released.

envoy - ['CVE-2019-18802']

unzip - ['CVE-2014-8139', 'CVE-2014-8141', 'CVE-2014-8140']
ncurses - ['CVE-2019-17594']

ncurses - ['CVE-2019-17595']

Update the affected packages (tdnf update package)

unzip-6.0-12.ph1.x86_64.rpm , sha256 : 202ae299018743b9efc4f24ad6876842e8b62cf15f39979fa97d9a0af50adf1b , size : 128K , build_date : Fri, 28 Feb 2020 04:55:35 UTC
envoy-1.10.0-6.ph1.x86_64.rpm , sha256 : 26aac7f0d7e73062448c187627916871d9f5ca9366be25139829f654c1522131 , size : 13M , build_date : Fri, 28 Feb 2020 05:03:33 UTC
envoy-debuginfo-1.10.0-6.ph1.x86_64.rpm , sha256 : c5482e9afb3af624ce82e92646ae60217c2a5e9e9b44a6b4b5dca1e40f2a9e2d , size : 4.7M , build_date : Fri, 28 Feb 2020 05:03:33 UTC
ncurses-compat-6.0-10.ph1.x86_64.rpm , sha256 : c6e12cea45af71dbfbe0bd096951e2faa236fcb8ef04f2fb789c09749d7132ad , size : 231K , build_date : Fri, 28 Feb 2020 04:54:39 UTC
ncurses-devel-6.0-10.ph1.x86_64.rpm , sha256 : 2f96e4e2a1788771d65267cf6ed6373d56c2351a83ea6f05d5ae0ade55d7199e , size : 403K , build_date : Fri, 28 Feb 2020 04:54:39 UTC
ncurses-debuginfo-6.0-10.ph1.x86_64.rpm , sha256 : d932ee7e814da7f5eba6c4d0a72d2d17ee0e2eb62727e93d4ffd6067715ed339 , size : 64K , build_date : Fri, 28 Feb 2020 04:54:39 UTC
ncurses-6.0-10.ph1.x86_64.rpm , sha256 : bddf44d5f64333477b8e3074a9c0acca52e3b4c8ea0d5ac220dd4172bc06b061 , size : 2.0M , build_date : Fri, 28 Feb 2020 04:54:39 UTC