# Critical Photon OS Security Update

## Summary
  
Advisory Id     : PHSA-2023-5.0-91-0043
  
Type            : Security
  
Severity        : ['Critical', 'Important', 'Moderate']
  
Issue date      : 2023-07-04
  
Affected Release: 5.0-91

## Details
  
Updates of ['sudo', 'kubernetes-dashboard'] packages of Photon OS have been released.
## Affected Packages

### Critical
  
kubernetes-dashboard - ['[CVE-2023-29402](https://nvd.nist.gov/vuln/detail/CVE-2023-29402)', '[CVE-2023-29405](https://nvd.nist.gov/vuln/detail/CVE-2023-29405)', '[CVE-2023-29404](https://nvd.nist.gov/vuln/detail/CVE-2023-29404)', '[CVE-2023-24538](https://nvd.nist.gov/vuln/detail/CVE-2023-24538)', '[CVE-2021-28235](https://nvd.nist.gov/vuln/detail/CVE-2021-28235)', '[CVE-2023-24540](https://nvd.nist.gov/vuln/detail/CVE-2023-24540)']

### Important
  
sudo - ['[CVE-2023-27320](https://nvd.nist.gov/vuln/detail/CVE-2023-27320)', '[CVE-2023-22809](https://nvd.nist.gov/vuln/detail/CVE-2023-22809)']
  
kubernetes-dashboard - ['[CVE-2019-19921](https://nvd.nist.gov/vuln/detail/CVE-2019-19921)', '[CVE-2023-29403](https://nvd.nist.gov/vuln/detail/CVE-2023-29403)', '[CVE-2023-24537](https://nvd.nist.gov/vuln/detail/CVE-2023-24537)', '[CVE-2023-24534](https://nvd.nist.gov/vuln/detail/CVE-2023-24534)', '[CVE-2023-29400](https://nvd.nist.gov/vuln/detail/CVE-2023-29400)', '[CVE-2022-41720](https://nvd.nist.gov/vuln/detail/CVE-2022-41720)', '[CVE-2023-24536](https://nvd.nist.gov/vuln/detail/CVE-2023-24536)', '[CVE-2022-41724](https://nvd.nist.gov/vuln/detail/CVE-2022-41724)', '[CVE-2023-27561](https://nvd.nist.gov/vuln/detail/CVE-2023-27561)', '[CVE-2022-41722](https://nvd.nist.gov/vuln/detail/CVE-2022-41722)', '[CVE-2022-41725](https://nvd.nist.gov/vuln/detail/CVE-2022-41725)', '[CVE-2023-28642](https://nvd.nist.gov/vuln/detail/CVE-2023-28642)', '[CVE-2023-24539](https://nvd.nist.gov/vuln/detail/CVE-2023-24539)']

### Moderate
  
kubernetes-dashboard - ['[CVE-2023-2728](https://nvd.nist.gov/vuln/detail/CVE-2023-2728)', '[CVE-2023-2727](https://nvd.nist.gov/vuln/detail/CVE-2023-2727)', '[CVE-2023-25809](https://nvd.nist.gov/vuln/detail/CVE-2023-25809)', '[CVE-2023-32082](https://nvd.nist.gov/vuln/detail/CVE-2023-32082)', '[CVE-2023-0296](https://nvd.nist.gov/vuln/detail/CVE-2023-0296)', '[CVE-2023-2431](https://nvd.nist.gov/vuln/detail/CVE-2023-2431)', '[CVE-2023-24532](https://nvd.nist.gov/vuln/detail/CVE-2023-24532)']

## Solution
  
Update the affected packages (tdnf update package)

## Updated Packages Information
  
sudo-1.9.13p3-1.ph5.x86_64.rpm | size : 1.8M , sha256 : 69a12f947ab4dccf3992f49fc5ab4ba22272d01f4a3a2f3381f9e08f410c0992 , build time : Tue, 04 Jul 2023 02:47:53 UTC
  
kubernetes-dashboard-2.7.0-6.ph5.x86_64.rpm | size : 42M , sha256 : 27e2d1175bdefce6e59e13cb6a604f00a9d130e20b7f82bf407003e8fbd5144d , build time : Tue, 04 Jul 2023 02:48:06 UTC