# Critical Photon OS Security Update

## Summary
  
Advisory Id     : PHSA-2023-5.0-91-0011
  
Type            : Security
  
Severity        : ['Critical', 'Important', 'Moderate']
  
Issue date      : 2023-05-24
  
Affected Release: 5.0-91

## Details
  
Updates of ['gnupg', 'nodejs'] packages of Photon OS have been released.
## Affected Packages

### Critical
  
gnupg - ['[CVE-2022-3515](https://nvd.nist.gov/vuln/detail/CVE-2022-3515)']

### Important
  
nodejs - ['[CVE-2023-23918](https://nvd.nist.gov/vuln/detail/CVE-2023-23918)', '[CVE-2023-23919](https://nvd.nist.gov/vuln/detail/CVE-2023-23919)', '[CVE-2022-3786](https://nvd.nist.gov/vuln/detail/CVE-2022-3786)', '[CVE-2022-43548](https://nvd.nist.gov/vuln/detail/CVE-2022-43548)', '[CVE-2022-3602](https://nvd.nist.gov/vuln/detail/CVE-2022-3602)']

### Moderate
  
gnupg - ['[CVE-2022-34903](https://nvd.nist.gov/vuln/detail/CVE-2022-34903)']
  
nodejs - ['[CVE-2023-23920](https://nvd.nist.gov/vuln/detail/CVE-2023-23920)']

## Solution
  
Update the affected packages (tdnf update package)

## Updated Packages Information
  
gnupg-2.2.41-1.ph5.x86_64.rpm | size : 2.5M , sha256 : ecf43eab9d3cf6d5d2907572591ce55f09140664f52abe756443a3aeee107e31 , build time : Wed, 24 May 2023 16:42:58 UTC
  
nodejs-18.16.0-1.ph5.x86_64.rpm | size : 25M , sha256 : b029e27b364874e105f6f0f29cc1c6894fea8050257e81e3453521f9726685df , build time : Wed, 24 May 2023 16:43:00 UTC
  
nodejs-devel-18.16.0-1.ph5.x86_64.rpm | size : 864K , sha256 : c143e9dae9aab7069b3835fa5752f3372c421043d03d6c08f9c6fdf95b01b19e , build time : Wed, 24 May 2023 16:43:00 UTC