Security Updates 1.0 283

[Critical] Photon OS Security Update

Summary

Advisory ID : PHSA-2020-1.0-0283
Type : Security
Severity : {'Important', 'Critical'}
Issued on : 2020-03-06
Affected Versions : Photon OS 1.0

Details

An update of {'PyYAML', 'yarn', 'cyrus-sasl'} packages of Photon OS has been released.

Affected Packages:

Critical

PyYAML - ['CVE-2019-20477']
yarn - ['CVE-2020-8131']

Important

cyrus-sasl - ['CVE-2019-19906']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

python3-PyYAML-3.12-4.ph1.x86_64.rpm , sha256 : 36bf4d88321ede9a89feab79c2489c8e6800557a33b94a05c73e934fd32a8822 , size : 191K , build_date : Sat, 07 Mar 2020 02:53:42 UTC
PyYAML-3.12-4.ph1.x86_64.rpm , sha256 : 7f52e3f07e67a25a3ea0adec574deedd1f41c97412888f6b83394e6edefc19d6 , size : 195K , build_date : Sat, 07 Mar 2020 02:53:42 UTC
PyYAML-debuginfo-3.12-4.ph1.x86_64.rpm , sha256 : 146af5e99cf1eee8777f031c78335153f36dc6482a58c195796cc69745516c40 , size : 572K , build_date : Sat, 07 Mar 2020 02:53:42 UTC
yarn-1.10.1-5.ph1.x86_64.rpm , sha256 : 89b0c9dabe54671ad255b0956e6bf31c4908f797edf2b752e7fde88a88399283 , size : 32M , build_date : Sat, 07 Mar 2020 03:02:44 UTC
cyrus-sasl-debuginfo-2.1.26-11.ph1.x86_64.rpm , sha256 : 0f2fa3038a8ef1fa5853af6289a9d89e1818ba0d3d3bc0dc75082d2bbbe89a1d , size : 659K , build_date : Sat, 07 Mar 2020 02:55:05 UTC
cyrus-sasl-2.1.26-11.ph1.x86_64.rpm , sha256 : d4756e93eea1bd1903dcf59d225b75c03cdcd0b37578db5811f2cb9f8dccb276 , size : 283K , build_date : Sat, 07 Mar 2020 02:55:05 UTC