Security Update 4.0 427

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-4.0-0427

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2023-07-14

Affected Release: 4.0

Details

Updates of ['calico', 'flannel', 'redis', 'python3', 'kubernetes-dns', 'kubernetes'] packages of Photon OS have been released.

Affected Packages

Critical

calico - ['CVE-2021-28235', 'CVE-2022-1996']

flannel - ['CVE-2021-28235']

kubernetes-dns - ['CVE-2021-28235']

Important

calico - ['CVE-2020-15115', 'CVE-2018-1098', 'CVE-2020-15114', 'CVE-2020-15113']

flannel - ['CVE-2020-15115', 'CVE-2018-1098', 'CVE-2020-15114', 'CVE-2020-15113']

redis - ['CVE-2022-24834', 'CVE-2023-36824']

kubernetes - ['CVE-2022-3172']

Moderate

calico - ['CVE-2023-0296', 'CVE-2020-15106', 'CVE-2023-32082', 'CVE-2020-15136', 'CVE-2020-15112', 'CVE-2022-28224', 'CVE-2018-1099']

flannel - ['CVE-2023-0296', 'CVE-2020-15106', 'CVE-2023-32082', 'CVE-2020-15136', 'CVE-2020-15112', 'CVE-2018-1099']

python3 - ['CVE-2023-27043', 'CVE-2022-40897']

kubernetes-dns - ['CVE-2023-0296', 'CVE-2018-1099']

kubernetes - ['CVE-2023-2431', 'CVE-2023-2728', 'CVE-2023-2727']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

calico-3.26.1-1.ph4.x86_64.rpm | size : 16M , sha256 : bac2e3ab0582a827d0fde62f46fbaa02ebcced965c8146939db3f54fddd3bb4f , build time : Fri, 14 Jul 2023 00:06:42 UTC

calico-cni-3.26.1-1.ph4.x86_64.rpm | size : 28M , sha256 : b3d09b6f2e7a7a57b2052d59c04b3cf797bb963456ef6cd5a72e35e477485817 , build time : Fri, 14 Jul 2023 00:06:42 UTC

calico-felix-3.26.1-1.ph4.x86_64.rpm | size : 15M , sha256 : 182272d559d9a89acf4167871779a2f15093afe802146e1d9d366e4f06cd3f46 , build time : Fri, 14 Jul 2023 00:06:42 UTC

calico-k8s-policy-3.26.1-1.ph4.x86_64.rpm | size : 11M , sha256 : c2143e5e026f4283278edee976552771cbbbff0cbc1bb300529adc00e797bc7f , build time : Fri, 14 Jul 2023 00:06:42 UTC

flannel-0.22.0-1.ph4.x86_64.rpm | size : 8.8M , sha256 : b169e8a5b44c1f65e099e8a422bdc61978aedb40eeaa962fd8a3f257d794f6c2 , build time : Fri, 14 Jul 2023 00:17:20 UTC

redis-7.0.12-1.ph4.x86_64.rpm | size : 1.4M , sha256 : 399e7450ed3ea40bed6598342fa55a58a53282b12342e0fff4c25190d82d8a62 , build time : Fri, 14 Jul 2023 00:15:53 UTC

python3-3.10.11-1.ph4.x86_64.rpm | size : 1.4M , sha256 : 6ccb55a40284e175dbcd33c677ad0cef2bb37de90e7904a4d6507c7747b805f6 , build time : Fri, 14 Jul 2023 00:06:33 UTC

python3-ConcurrentLogHandler-0.9.23-1.ph4.noarch.rpm | size : 36K , sha256 : bddac8333c87d4db12d3d3d2567a3b3869466fcfb08d22758762b7f683ae44dd , build time : Fri, 14 Jul 2023 00:15:34 UTC

python3-curses-3.10.11-1.ph4.x86_64.rpm | size : 64K , sha256 : aa20224bfa30cefc46073c0a40d019a16d09f33a5c46ab2d4fc6fe7dc9e92327 , build time : Fri, 14 Jul 2023 00:06:33 UTC

python3-devel-3.10.11-1.ph4.x86_64.rpm | size : 188K , sha256 : 00d119d3f0d5f0ed60d003395aa5c356a57ba7d6264aa61037f54b464c55f359 , build time : Fri, 14 Jul 2023 00:06:33 UTC

python3-libs-3.10.11-1.ph4.x86_64.rpm | size : 8.0M , sha256 : 7186af3a570fff39ab29cacb67eada4f8213d68f3240bc95f9122081f0619f3e , build time : Fri, 14 Jul 2023 00:06:33 UTC

python3-macros-3.10.11-1.ph4.noarch.rpm | size : 16K , sha256 : 93300ded2e1dfabc4db0cabc7eb072c3e1a2eff49a7ed099d5efd36737f30a84 , build time : Fri, 14 Jul 2023 00:06:33 UTC

python3-pip-23.0.1-1.ph4.noarch.rpm | size : 2.5M , sha256 : a0dd7f0184529e23379b000757870462214599e1c62c94a65f0f6bf59821bb57 , build time : Fri, 14 Jul 2023 00:15:15 UTC

python3-portalocker-2.7.0-1.ph4.noarch.rpm | size : 32K , sha256 : c2b5ff61f07d3a6dc07a8000881ea97b1aa6ac42a7cf2687d5160350355133e6 , build time : Fri, 14 Jul 2023 00:15:15 UTC

python3-pwquality-1.4.2-3.ph4.x86_64.rpm | size : 20K , sha256 : 7c2c268908377c19805062bb09d52e766e2587ca8af54ea1edc682a1a27f6d0f , build time : Fri, 14 Jul 2023 00:15:16 UTC

python3-setuptools-65.5.1-1.ph4.noarch.rpm | size : 1.2M , sha256 : bcdc220b336e23c1d76443b10a416a634ac7ca351d8bb1548820ed7ead5ad332 , build time : Fri, 14 Jul 2023 00:14:47 UTC

python3-test-3.10.11-1.ph4.x86_64.rpm | size : 3.2M , sha256 : 9cdd4c9566b2938faa926ca2bc8eb52503eb33259f00129e8827ce426266461e , build time : Fri, 14 Jul 2023 00:06:33 UTC

python3-tools-3.10.11-1.ph4.x86_64.rpm | size : 148K , sha256 : 12b528d53ecef50af965e2ea3789939ddac08e814e5e15a7ff4d169cd836fb20 , build time : Fri, 14 Jul 2023 00:06:33 UTC

python3-xml-3.10.11-1.ph4.x86_64.rpm | size : 96K , sha256 : 4c0b9b2882e490b257d4d8730c7092a551f59bb16538dd6cf3104ea8a0ce723c , build time : Fri, 14 Jul 2023 00:06:33 UTC

kubernetes-dns-1.22.20-1.ph4.x86_64.rpm | size : 25M , sha256 : da70557e6398f5dcaedeba3ddd3152c042a05d15bd7c5e0460e63e253f3950f8 , build time : Fri, 14 Jul 2023 00:06:42 UTC

kubernetes-1.27.3-1.ph4.x86_64.rpm | size : 111M , sha256 : c4d7193747720ea42948194813a154fe4dffa3a30d126204c95056f735dc5bfe , build time : Fri, 14 Jul 2023 00:17:22 UTC

kubernetes-dns-1.22.20-1.ph4.x86_64.rpm | size : 25M , sha256 : da70557e6398f5dcaedeba3ddd3152c042a05d15bd7c5e0460e63e253f3950f8 , build time : Fri, 14 Jul 2023 00:06:42 UTC

kubernetes-kubeadm-1.27.3-1.ph4.x86_64.rpm | size : 11M , sha256 : 484e330ba9fac6fcecfe39965db7f2d93fc249e7125911aef9926d4bbe0d1a6e , build time : Fri, 14 Jul 2023 00:17:22 UTC

kubernetes-pause-1.27.3-1.ph4.x86_64.rpm | size : 264K , sha256 : 4ede2447f1e2835b29538b1e867965a0dc66681981ae4960786ebe2bb62c5694 , build time : Fri, 14 Jul 2023 00:17:22 UTC