Security Update 4.0 415

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-4.0-0415

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2023-06-22

Affected Release: 4.0

Details

Updates of ['shadow', 'calico', 'pmd-ng', 'nodejs', 'syslinux'] packages of Photon OS have been released.

Affected Packages

Critical

calico - ['CVE-2023-29404', 'CVE-2023-29405', 'CVE-2023-29402']

pmd-ng - ['CVE-2023-24540', 'CVE-2023-29402', 'CVE-2023-29404', 'CVE-2023-29405', 'CVE-2023-24538']

syslinux - ['CVE-2017-12652']

Important

calico - ['CVE-2023-29403']

pmd-ng - ['CVE-2023-29400', 'CVE-2023-24539', 'CVE-2023-24537', 'CVE-2023-24536', 'CVE-2023-24534', 'CVE-2023-29403']

nodejs - ['CVE-2022-3996', 'CVE-2020-11080', 'CVE-2022-4450', 'CVE-2023-0401', 'CVE-2023-0286', 'CVE-2023-0216', 'CVE-2018-1000168', 'CVE-2023-0215', 'CVE-2023-0217']

syslinux - ['CVE-2015-0973', 'CVE-2018-14550', 'CVE-2016-3751']

Moderate

shadow - ['CVE-2013-4235']

nodejs - ['CVE-2022-4203', 'CVE-2022-4304', 'CVE-2023-0466']

syslinux - ['CVE-2014-9495', 'CVE-2018-14048', 'CVE-2019-6129', 'CVE-2018-13785', 'CVE-2021-4214']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

shadow-4.13-1.ph4.x86_64.rpm | size : 412K , sha256 : f947b5bf678915c30ff238f05d11a6070bf6ded9624cff25e18b395f809a3898 , build time : Wed, 21 Jun 2023 16:26:14 UTC

shadow-devel-4.13-1.ph4.x86_64.rpm | size : 84K , sha256 : 0912731036f8326074d4225b3d3f2ff7251b36a8549e6079fcde95124f4e0510 , build time : Wed, 21 Jun 2023 16:26:14 UTC

shadow-lang-4.13-1.ph4.x86_64.rpm | size : 316K , sha256 : 21f6609c258877a7acaee28b0391c1ab28f70080465b34497dc83accd3dfe533 , build time : Wed, 21 Jun 2023 16:26:14 UTC

shadow-libs-4.13-1.ph4.x86_64.rpm | size : 72K , sha256 : 35eb1c21029e10f5b308130fb9c5a0b17e17ed0f692638eba597cca3efb3e7f1 , build time : Wed, 21 Jun 2023 16:26:14 UTC

shadow-tools-4.13-1.ph4.x86_64.rpm | size : 60K , sha256 : befa928252f012dfc2ed2954ee6a72fbbc7b49ae54974e6533dc3a30f928c54b , build time : Wed, 21 Jun 2023 16:26:14 UTC

calico-3.20.2-14.ph4.x86_64.rpm | size : 14M , sha256 : d245ce4bf36a9100adbc03b9f75a3617a29730a4849db618eec939864467e2bf , build time : Wed, 21 Jun 2023 16:36:22 UTC

calico-bgp-daemon-0.2.2-21.ph4.x86_64.rpm | size : 7.2M , sha256 : 373b248829c36e9c745ef58bb9cc5ead33ea01f0e3f4ea6ac8fe1359cb4a652e , build time : Wed, 21 Jun 2023 17:01:32 UTC

calico-cni-3.21.0-14.ph4.x86_64.rpm | size : 26M , sha256 : 3d693ba672fbcc071d3a29e509d911fb767c16eea1fb05e49ae0733e62515f3d , build time : Wed, 21 Jun 2023 16:59:56 UTC

calico-confd-0.16.0-20.ph4.x86_64.rpm | size : 5.0M , sha256 : a6a366390675c89880c79a419b65dae887d00546cf5c9f447f093f3260f73f48 , build time : Wed, 21 Jun 2023 17:04:49 UTC

calico-felix-3.20.2-13.ph4.x86_64.rpm | size : 14M , sha256 : b70ff7f7e719f8586cced5963c0e5be995ef02ae7db6777d32b784a69ae10d67 , build time : Wed, 21 Jun 2023 16:37:39 UTC

calico-k8s-policy-3.21.0-13.ph4.x86_64.rpm | size : 9.4M , sha256 : 86cf0e15924f26cd76094d2ab2c6b5a831b08a4da56478d42a8cfd5b0b01abce , build time : Wed, 21 Jun 2023 16:42:01 UTC

calico-libnetwork-1.1.3-20.ph4.x86_64.rpm | size : 5.3M , sha256 : 1453b07ac4eb6b2c5c254011668ae74c6c851082aca164f5f409b3efc50db280 , build time : Wed, 21 Jun 2023 17:00:50 UTC

pmd-ng-0.1-2.ph4.x86_64.rpm | size : 6.8M , sha256 : b1dabafe5d45c9ba55f60e41c96cbac296585eb60dc4b56ef3cdc401411e9522 , build time : Wed, 21 Jun 2023 16:59:00 UTC

nodejs-18.16.0-1.ph4.x86_64.rpm | size : 25M , sha256 : 554d5261bdd2c56d16e47628a4f34d8b14e9f84668b8a8ca146d1f72c1b26714 , build time : Wed, 21 Jun 2023 16:26:18 UTC

nodejs-devel-18.16.0-1.ph4.x86_64.rpm | size : 864K , sha256 : c2729432f86cb8f01c6ce486ea693990aced6ec8c1bfffbecbfe96bcf646c8c3 , build time : Wed, 21 Jun 2023 16:26:18 UTC

syslinux-6.04-9.ph4.x86_64.rpm | size : 628K , sha256 : 9c3a4de60e385654baf8c5b6a4331c18e10a967f20a086e48158ebe4f9dc2db7 , build time : Wed, 21 Jun 2023 16:26:14 UTC

syslinux-devel-6.04-9.ph4.x86_64.rpm | size : 236K , sha256 : b56d04dd78fd50896943b6604d260ceb9931d664f5e612d4a9461d3e3a4f9609 , build time : Wed, 21 Jun 2023 16:26:14 UTC