# Important Photon OS Security Update

## Summary
  
Advisory Id     : PHSA-2023-5.0-91-0041
  
Type            : Security
  
Severity        : ['Important', 'Moderate']
  
Issue date      : 2023-06-29
  
Affected Release: 5.0-91

## Details
  
Updates of ['telegraf', 'openssl', 'nodejs', 'dnsmasq'] packages of Photon OS have been released.
## Affected Packages

### Important
  
telegraf - ['[CVE-2020-35380](https://nvd.nist.gov/vuln/detail/CVE-2020-35380)', '[CVE-2020-36067](https://nvd.nist.gov/vuln/detail/CVE-2020-36067)', '[CVE-2021-41103](https://nvd.nist.gov/vuln/detail/CVE-2021-41103)', '[CVE-2021-31239](https://nvd.nist.gov/vuln/detail/CVE-2021-31239)', '[CVE-2019-13139](https://nvd.nist.gov/vuln/detail/CVE-2019-13139)', '[CVE-2021-42836](https://nvd.nist.gov/vuln/detail/CVE-2021-42836)', '[CVE-2018-15664](https://nvd.nist.gov/vuln/detail/CVE-2018-15664)', '[CVE-2019-16884](https://nvd.nist.gov/vuln/detail/CVE-2019-16884)', '[CVE-2022-46908](https://nvd.nist.gov/vuln/detail/CVE-2022-46908)', '[CVE-2022-35737](https://nvd.nist.gov/vuln/detail/CVE-2022-35737)', '[CVE-2021-37219](https://nvd.nist.gov/vuln/detail/CVE-2021-37219)', '[CVE-2020-13250](https://nvd.nist.gov/vuln/detail/CVE-2020-13250)', '[CVE-2021-42248](https://nvd.nist.gov/vuln/detail/CVE-2021-42248)', '[CVE-2020-36066](https://nvd.nist.gov/vuln/detail/CVE-2020-36066)', '[CVE-2020-7219](https://nvd.nist.gov/vuln/detail/CVE-2020-7219)', '[CVE-2022-23648](https://nvd.nist.gov/vuln/detail/CVE-2022-23648)', '[CVE-2019-13509](https://nvd.nist.gov/vuln/detail/CVE-2019-13509)', '[CVE-2023-25173](https://nvd.nist.gov/vuln/detail/CVE-2023-25173)', '[CVE-2019-5736](https://nvd.nist.gov/vuln/detail/CVE-2019-5736)', '[CVE-2019-15752](https://nvd.nist.gov/vuln/detail/CVE-2019-15752)', '[CVE-2022-29153](https://nvd.nist.gov/vuln/detail/CVE-2022-29153)']
  
nodejs - ['[CVE-2023-0464](https://nvd.nist.gov/vuln/detail/CVE-2023-0464)', '[CVE-2023-30585](https://nvd.nist.gov/vuln/detail/CVE-2023-30585)', '[CVE-2023-30581](https://nvd.nist.gov/vuln/detail/CVE-2023-30581)', '[CVE-2023-30589](https://nvd.nist.gov/vuln/detail/CVE-2023-30589)', '[CVE-2023-30590](https://nvd.nist.gov/vuln/detail/CVE-2023-30590)']
  
dnsmasq - ['[CVE-2023-28450](https://nvd.nist.gov/vuln/detail/CVE-2023-28450)']

### Moderate
  
telegraf - ['[CVE-2020-27534](https://nvd.nist.gov/vuln/detail/CVE-2020-27534)', '[CVE-2020-25864](https://nvd.nist.gov/vuln/detail/CVE-2020-25864)', '[CVE-2022-23471](https://nvd.nist.gov/vuln/detail/CVE-2022-23471)', '[CVE-2023-2816](https://nvd.nist.gov/vuln/detail/CVE-2023-2816)', '[CVE-2018-10892](https://nvd.nist.gov/vuln/detail/CVE-2018-10892)', '[CVE-2021-21285](https://nvd.nist.gov/vuln/detail/CVE-2021-21285)', '[CVE-2021-21334](https://nvd.nist.gov/vuln/detail/CVE-2021-21334)', '[CVE-2021-32760](https://nvd.nist.gov/vuln/detail/CVE-2021-32760)', '[CVE-2021-21284](https://nvd.nist.gov/vuln/detail/CVE-2021-21284)', '[CVE-2019-3826](https://nvd.nist.gov/vuln/detail/CVE-2019-3826)', '[CVE-2022-31030](https://nvd.nist.gov/vuln/detail/CVE-2022-31030)', '[CVE-2018-19653](https://nvd.nist.gov/vuln/detail/CVE-2018-19653)', '[CVE-2022-40716](https://nvd.nist.gov/vuln/detail/CVE-2022-40716)', '[CVE-2020-28053](https://nvd.nist.gov/vuln/detail/CVE-2020-28053)', '[CVE-2019-19794](https://nvd.nist.gov/vuln/detail/CVE-2019-19794)', '[CVE-2021-20227](https://nvd.nist.gov/vuln/detail/CVE-2021-20227)', '[CVE-2018-20699](https://nvd.nist.gov/vuln/detail/CVE-2018-20699)', '[CVE-2020-15257](https://nvd.nist.gov/vuln/detail/CVE-2020-15257)', '[CVE-2021-38698](https://nvd.nist.gov/vuln/detail/CVE-2021-38698)', '[CVE-2020-13401](https://nvd.nist.gov/vuln/detail/CVE-2020-13401)', '[CVE-2023-25153](https://nvd.nist.gov/vuln/detail/CVE-2023-25153)', '[CVE-2020-10750](https://nvd.nist.gov/vuln/detail/CVE-2020-10750)']
  
openssl - ['[CVE-2023-2650](https://nvd.nist.gov/vuln/detail/CVE-2023-2650)', '[CVE-2023-0466](https://nvd.nist.gov/vuln/detail/CVE-2023-0466)']
  
nodejs - ['[CVE-2023-30588](https://nvd.nist.gov/vuln/detail/CVE-2023-30588)', '[CVE-2023-0466](https://nvd.nist.gov/vuln/detail/CVE-2023-0466)', '[CVE-2023-1255](https://nvd.nist.gov/vuln/detail/CVE-2023-1255)', '[CVE-2023-2650](https://nvd.nist.gov/vuln/detail/CVE-2023-2650)', '[CVE-2023-0465](https://nvd.nist.gov/vuln/detail/CVE-2023-0465)']

## Solution
  
Update the affected packages (tdnf update package)

## Updated Packages Information
  
telegraf-1.27.1-1.ph5.x86_64.rpm | size : 40M , sha256 : c1e4ab0fa7efeb2fe04e619341b50250ee7a61f745cf0b58afed47a02271b5f9 , build time : Thu, 29 Jun 2023 18:41:10 UTC
  
openssl-3.0.9-1.ph5.x86_64.rpm | size : 344K , sha256 : ea6264d5c85e72674ae9ac2fa38b03aad8f5e21cd69384913fa00afe84d32e6e , build time : Thu, 29 Jun 2023 18:32:44 UTC
  
openssl-c_rehash-3.0.9-1.ph5.x86_64.rpm | size : 16K , sha256 : dc8df8c91f67317a08fc16a32f1e331732ed4bdb6067a9b27aaca2d0a3c648f0 , build time : Thu, 29 Jun 2023 18:32:44 UTC
  
openssl-devel-3.0.9-1.ph5.x86_64.rpm | size : 4.8M , sha256 : f6c726ebcd9a808347b912ed10d0c0835f6b92c7ad436013d5e9d043ee32b49d , build time : Thu, 29 Jun 2023 18:32:44 UTC
  
openssl-docs-3.0.9-1.ph5.x86_64.rpm | size : 2.0M , sha256 : 6f4db4d07a7d0212ee91c43cdd99cd9dcbff49687690ced31b8f063785cdd1f0 , build time : Thu, 29 Jun 2023 18:32:44 UTC
  
openssl-libs-3.0.9-1.ph5.x86_64.rpm | size : 1.9M , sha256 : bfd93c508d295f9e1d3a6fae0373c20a2de97025db7647a30540e84c00b4fbe7 , build time : Thu, 29 Jun 2023 18:32:44 UTC
  
openssl-perl-3.0.9-1.ph5.x86_64.rpm | size : 20K , sha256 : f4a117d33f9be7b01ab3c7183401ab2024ddabdc59af05a8fa0fba4f34fa822a , build time : Thu, 29 Jun 2023 18:32:44 UTC
  
nodejs-18.16.1-1.ph5.x86_64.rpm | size : 25M , sha256 : 77a98a05befb85ab0889868693eb96b3b8cde1976059389728773f831f1bea96 , build time : Thu, 29 Jun 2023 18:36:06 UTC
  
nodejs-devel-18.16.1-1.ph5.x86_64.rpm | size : 864K , sha256 : f38d7969fdf6111f1e4dd09eeeb26387529cf0acb2f7da19dfb1c5f9ce91b141 , build time : Thu, 29 Jun 2023 18:36:06 UTC
  
dnsmasq-2.89-1.ph5.x86_64.rpm | size : 276K , sha256 : 68234c04277ebcaaf205c19203a7c2e55cd3e80a0095b6db522cdc25ce112d90 , build time : Thu, 29 Jun 2023 18:40:51 UTC
  
dnsmasq-utils-2.89-1.ph5.x86_64.rpm | size : 24K , sha256 : 86126f671a6208ccfb675588869598d12ed01c57daa60f1ef4d791e1d4b4d17b , build time : Thu, 29 Jun 2023 18:40:51 UTC