Security Update 5.0 49

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-5.0-0049

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2023-07-14

Affected Release: 5.0

Details

Updates of ['podman', 'calico', 'flannel', 'redis', 'curl', 'kubernetes'] packages of Photon OS have been released.

Affected Packages

Critical

calico - ['CVE-2021-28235', 'CVE-2022-1996']

flannel - ['CVE-2021-28235']

kubernetes - ['CVE-2021-28235']

Important

podman - ['CVE-2023-25173']

calico - ['CVE-2020-15115', 'CVE-2018-1098', 'CVE-2020-15114', 'CVE-2020-15113']

redis - ['CVE-2022-24834', 'CVE-2023-36824']

curl - ['CVE-2023-28319']

kubernetes - ['CVE-2023-28642', 'CVE-2023-27561', 'CVE-2019-19921']

Moderate

podman - ['CVE-2023-25153', 'CVE-2022-23471']

calico - ['CVE-2023-0296', 'CVE-2020-15106', 'CVE-2023-32082', 'CVE-2020-15136', 'CVE-2020-15112', 'CVE-2018-1099']

flannel - ['CVE-2023-32082']

redis - ['CVE-2023-28425']

curl - ['CVE-2023-28320', 'CVE-2023-28321']

kubernetes - ['CVE-2023-0296', 'CVE-2023-32082', 'CVE-2023-2431', 'CVE-2023-2728', 'CVE-2023-2727', 'CVE-2023-25809']

Low

curl - ['CVE-2023-28322']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

podman-4.5.1-1.ph5.x86_64.rpm | size : 15M , sha256 : 07f34271a70abda19bb549e5f3171c731390532dbf5dff7190c8926f8b0fbde7 , build time : Fri, 14 Jul 2023 00:10:44 UTC

podman-gvproxy-4.5.1-1.ph5.x86_64.rpm | size : 3.4M , sha256 : 50c2bec1dddeec5353ab20aaf43b9e23e0cf85b654aaddf983d88f4217fc71a2 , build time : Fri, 14 Jul 2023 00:10:44 UTC

podman-plugins-4.5.1-1.ph5.x86_64.rpm | size : 1.2M , sha256 : 6d8e045af8dff00b305d2265c37d5cd394187c18636a06e990772b5dd2aed14f , build time : Fri, 14 Jul 2023 00:10:44 UTC

podman-remote-4.5.1-1.ph5.x86_64.rpm | size : 9.5M , sha256 : c455d3ff1d7f9e2d8ffa40cabc67b557ee84e503ba4e3d27e9142ebb2123f4c8 , build time : Fri, 14 Jul 2023 00:10:44 UTC

podman-tests-4.5.1-1.ph5.x86_64.rpm | size : 152K , sha256 : f712271a6faa39c43e897d52cf7b8a7d183fe63bb16092ef10cdb5f12305f34d , build time : Fri, 14 Jul 2023 00:10:44 UTC

calico-3.26.1-1.ph5.x86_64.rpm | size : 16M , sha256 : d75d4b07a23205a7ecf48edcba8f43583a634d0cfe1c4bc1f944dfe87ae11328 , build time : Fri, 14 Jul 2023 00:08:39 UTC

calico-cni-3.26.1-1.ph5.x86_64.rpm | size : 28M , sha256 : bc5646b123277ccbe77f61505a49ad74a54bd564da4114377f4f733f78ec46e5 , build time : Fri, 14 Jul 2023 00:08:39 UTC

calico-felix-3.26.1-1.ph5.x86_64.rpm | size : 15M , sha256 : 05e4dffd7222f03275bb942fa3c62a47232fe67ffbbb42d3e34e3a8297494218 , build time : Fri, 14 Jul 2023 00:08:39 UTC

calico-k8s-policy-3.26.1-1.ph5.x86_64.rpm | size : 11M , sha256 : 670f3606a2595c5cbe93da9bda7952ebdc4e35f62e629ac3bb5e66397a6aaf14 , build time : Fri, 14 Jul 2023 00:08:39 UTC

flannel-0.22.0-1.ph5.x86_64.rpm | size : 8.8M , sha256 : 620c26a0fb191f8b1a3b102eac8e388819a3fca96d2f36a3f2f100286b4d6f82 , build time : Fri, 14 Jul 2023 00:07:13 UTC

redis-7.0.12-1.ph5.x86_64.rpm | size : 1.4M , sha256 : 1643bdd2a04f7b7e36897590562a806d99622b366186e3d05b2e279ddc6f2aa5 , build time : Fri, 14 Jul 2023 00:08:40 UTC

curl-8.1.2-1.ph5.x86_64.rpm | size : 156K , sha256 : bf1dd4f634481043acec984d4f28888eb13a97c790c1604e62cd3863edba3506 , build time : Fri, 14 Jul 2023 00:07:10 UTC

curl-devel-8.1.2-1.ph5.x86_64.rpm | size : 808K , sha256 : ca4cd7fe7fb9bd2648662f7055033d2df766eafc41ba3967372f4f3f3391ed2c , build time : Fri, 14 Jul 2023 00:07:10 UTC

curl-libs-8.1.2-1.ph5.x86_64.rpm | size : 304K , sha256 : 99d6140ab24bb17d105531fbd35c4e2c697717beb8a3a36caac3e20469727c58 , build time : Fri, 14 Jul 2023 00:07:10 UTC

kubernetes-1.27.3-1.ph5.x86_64.rpm | size : 111M , sha256 : b6e2357b6ad089d1cff0ab14b200506ab22eb36f1860a81059b32079e4e7d287 , build time : Fri, 14 Jul 2023 00:08:50 UTC

kubernetes-kubeadm-1.27.3-1.ph5.x86_64.rpm | size : 11M , sha256 : 1516801b2b2f3165de06659808affa3e2026faadb73daa85fdd5a98fe88194ce , build time : Fri, 14 Jul 2023 00:08:50 UTC

kubernetes-pause-1.27.3-1.ph5.x86_64.rpm | size : 272K , sha256 : 1f760a590c73b78f31be7e0d49934650f709cb6e2de2be0d5abdaf246cb3bb3f , build time : Fri, 14 Jul 2023 00:08:50 UTC