# Critical Photon OS Security Update

## Summary
  
Advisory Id     : PHSA-2023-5.0-91-0037
  
Type            : Security
  
Severity        : ['Critical', 'Important']
  
Issue date      : 2023-06-23
  
Affected Release: 5.0-91

## Details
  
Updates of ['pmd-ng', 'samba-client', 'bindutils', 'go', 'calico'] packages of Photon OS have been released.
## Affected Packages

### Critical
  
pmd-ng - ['[CVE-2023-29402](https://nvd.nist.gov/vuln/detail/CVE-2023-29402)', '[CVE-2023-24538](https://nvd.nist.gov/vuln/detail/CVE-2023-24538)', '[CVE-2023-29405](https://nvd.nist.gov/vuln/detail/CVE-2023-29405)', '[CVE-2023-29404](https://nvd.nist.gov/vuln/detail/CVE-2023-29404)', '[CVE-2023-24540](https://nvd.nist.gov/vuln/detail/CVE-2023-24540)']
  
go - ['[CVE-2023-29405](https://nvd.nist.gov/vuln/detail/CVE-2023-29405)', '[CVE-2023-29404](https://nvd.nist.gov/vuln/detail/CVE-2023-29404)', '[CVE-2023-29402](https://nvd.nist.gov/vuln/detail/CVE-2023-29402)']
  
calico - ['[CVE-2023-29405](https://nvd.nist.gov/vuln/detail/CVE-2023-29405)', '[CVE-2023-29404](https://nvd.nist.gov/vuln/detail/CVE-2023-29404)', '[CVE-2023-29402](https://nvd.nist.gov/vuln/detail/CVE-2023-29402)']

### Important
  
pmd-ng - ['[CVE-2023-24534](https://nvd.nist.gov/vuln/detail/CVE-2023-24534)', '[CVE-2023-29403](https://nvd.nist.gov/vuln/detail/CVE-2023-29403)', '[CVE-2023-29400](https://nvd.nist.gov/vuln/detail/CVE-2023-29400)', '[CVE-2023-24536](https://nvd.nist.gov/vuln/detail/CVE-2023-24536)', '[CVE-2023-24537](https://nvd.nist.gov/vuln/detail/CVE-2023-24537)', '[CVE-2023-24539](https://nvd.nist.gov/vuln/detail/CVE-2023-24539)']
  
samba-client - ['[CVE-2020-25720](https://nvd.nist.gov/vuln/detail/CVE-2020-25720)']
  
bindutils - ['[CVE-2023-2911](https://nvd.nist.gov/vuln/detail/CVE-2023-2911)', '[CVE-2023-2828](https://nvd.nist.gov/vuln/detail/CVE-2023-2828)']
  
go - ['[CVE-2023-29403](https://nvd.nist.gov/vuln/detail/CVE-2023-29403)']
  
calico - ['[CVE-2023-29403](https://nvd.nist.gov/vuln/detail/CVE-2023-29403)']

## Solution
  
Update the affected packages (tdnf update package)

## Updated Packages Information
  
pmd-ng-0.1-3.ph5.x86_64.rpm | size : 6.8M , sha256 : 1c442d3485467dcd28543ba0ebf8f2e831606e2584b20c67340f23ca07b54f1b , build time : Fri, 23 Jun 2023 11:55:21 UTC
  
samba-client-4.18.3-1.ph5.x86_64.rpm | size : 1.2M , sha256 : f45f8293311bad022c4ea26ecf5150342f854f2c11144691b965bcc26e70aeb9 , build time : Fri, 23 Jun 2023 11:41:58 UTC
  
samba-client-devel-4.18.3-1.ph5.x86_64.rpm | size : 212K , sha256 : 27384e4da63525e4bcd38827c691c1fa4f51d5d4df8241daa1d51ed4637d8649 , build time : Fri, 23 Jun 2023 11:41:58 UTC
  
samba-client-libs-4.18.3-1.ph5.x86_64.rpm | size : 6.2M , sha256 : ed6bbc6e1c46c7520fb8c056c90e03f242e69624ac6d89501e56874757dcc7ef , build time : Fri, 23 Jun 2023 11:41:58 UTC
  
bindutils-9.19.14-1.ph5.x86_64.rpm | size : 540K , sha256 : 6d500c46a1564386beb364f030b8c7bf5deef22c17c83da85df5fe0e00bd2bf3 , build time : Fri, 23 Jun 2023 11:38:58 UTC
  
bindutils-devel-9.19.14-1.ph5.x86_64.rpm | size : 320K , sha256 : 729c5cc4f9c53f145c9e307220936b0b4dfeab5a398a27ac26a3260a3a60554c , build time : Fri, 23 Jun 2023 11:38:58 UTC
  
bindutils-libs-9.19.14-1.ph5.x86_64.rpm | size : 1.2M , sha256 : 9e0b04d5a398fa67b73b822745a8fc6d4a4db271eb241e979eabf22212a7f468 , build time : Fri, 23 Jun 2023 11:38:58 UTC
  
go-1.20.5-1.ph5.x86_64.rpm | size : 76M , sha256 : 3ac11db9f10225ae1ca2c958e7454328a1b8291590e575fef1e8c69c16aeab4c , build time : Fri, 23 Jun 2023 11:38:59 UTC
  
go-md2man-2.0.2-4.ph5.x86_64.rpm | size : 732K , sha256 : 92197e75e0068fbbf0ed35ae188178e5cd3296bbc755a052a86d0e3851aa24d8 , build time : Fri, 23 Jun 2023 11:44:15 UTC
  
calico-3.25.0-5.ph5.x86_64.rpm | size : 15M , sha256 : b79233970d882fe71cf734f9ad783e524b8d78a7b9a5c4ca05dc7da12524dc3d , build time : Fri, 23 Jun 2023 11:44:24 UTC
  
calico-bgp-daemon-0.2.2-12.ph5.x86_64.rpm | size : 7.2M , sha256 : b3e2ebc033e1a65a33c1471061e4459434ffb54f3f1593743e20b19d736ec9f5 , build time : Fri, 23 Jun 2023 11:55:56 UTC
  
calico-cni-3.25.0-5.ph5.x86_64.rpm | size : 28M , sha256 : f9f01e76bf250c65f9f8ba39ec4c22f398540e9a29f78b6c428736b6b0ff1100 , build time : Fri, 23 Jun 2023 11:44:24 UTC
  
calico-confd-0.16.0-11.ph5.x86_64.rpm | size : 5.0M , sha256 : 97b94e7c32b61994d4a6f534391c471deff9ffe46f47865cb9dc4dad356a403c , build time : Fri, 23 Jun 2023 11:57:59 UTC
  
calico-felix-3.25.0-5.ph5.x86_64.rpm | size : 15M , sha256 : 0cb99f99157e8a4615fc8c6edf237d25cc3c26caee8d8db99db3243e58c8c2ac , build time : Fri, 23 Jun 2023 11:44:24 UTC
  
calico-k8s-policy-3.25.0-5.ph5.x86_64.rpm | size : 11M , sha256 : ec1df02e32af2f2e1895a1a3ef6d205a934cff008d61d06cea7cd881549f0e2a , build time : Fri, 23 Jun 2023 11:44:24 UTC
  
calico-libnetwork-1.1.3-11.ph5.x86_64.rpm | size : 5.3M , sha256 : 58d8aeb8278f68d300fd5859bb695cc37ea2ae7627399f6df3179d656ac98874 , build time : Fri, 23 Jun 2023 11:55:41 UTC