# Critical Photon OS Security Update

## Summary
  
Advisory Id     : PHSA-2023-5.0-91-0049
  
Type            : Security
  
Severity        : ['Critical', 'Important', 'Moderate', 'Low']
  
Issue date      : 2023-07-14
  
Affected Release: 5.0-91

## Details
  
Updates of ['curl', 'redis', 'flannel', 'calico', 'podman', 'kubernetes'] packages of Photon OS have been released.
## Affected Packages

### Critical
  
flannel - ['[CVE-2021-28235](https://nvd.nist.gov/vuln/detail/CVE-2021-28235)']
  
calico - ['[CVE-2022-1996](https://nvd.nist.gov/vuln/detail/CVE-2022-1996)', '[CVE-2021-28235](https://nvd.nist.gov/vuln/detail/CVE-2021-28235)']
  
kubernetes - ['[CVE-2021-28235](https://nvd.nist.gov/vuln/detail/CVE-2021-28235)']

### Important
  
curl - ['[CVE-2023-28319](https://nvd.nist.gov/vuln/detail/CVE-2023-28319)']
  
redis - ['[CVE-2022-24834](https://nvd.nist.gov/vuln/detail/CVE-2022-24834)', '[CVE-2023-36824](https://nvd.nist.gov/vuln/detail/CVE-2023-36824)']
  
calico - ['[CVE-2020-15115](https://nvd.nist.gov/vuln/detail/CVE-2020-15115)', '[CVE-2020-15114](https://nvd.nist.gov/vuln/detail/CVE-2020-15114)', '[CVE-2018-1098](https://nvd.nist.gov/vuln/detail/CVE-2018-1098)', '[CVE-2020-15113](https://nvd.nist.gov/vuln/detail/CVE-2020-15113)']
  
podman - ['[CVE-2023-25173](https://nvd.nist.gov/vuln/detail/CVE-2023-25173)']
  
kubernetes - ['[CVE-2019-19921](https://nvd.nist.gov/vuln/detail/CVE-2019-19921)', '[CVE-2023-27561](https://nvd.nist.gov/vuln/detail/CVE-2023-27561)', '[CVE-2023-28642](https://nvd.nist.gov/vuln/detail/CVE-2023-28642)']

### Moderate
  
curl - ['[CVE-2023-28321](https://nvd.nist.gov/vuln/detail/CVE-2023-28321)', '[CVE-2023-28320](https://nvd.nist.gov/vuln/detail/CVE-2023-28320)']
  
redis - ['[CVE-2023-28425](https://nvd.nist.gov/vuln/detail/CVE-2023-28425)']
  
flannel - ['[CVE-2023-32082](https://nvd.nist.gov/vuln/detail/CVE-2023-32082)']
  
calico - ['[CVE-2023-32082](https://nvd.nist.gov/vuln/detail/CVE-2023-32082)', '[CVE-2023-0296](https://nvd.nist.gov/vuln/detail/CVE-2023-0296)', '[CVE-2020-15106](https://nvd.nist.gov/vuln/detail/CVE-2020-15106)', '[CVE-2020-15112](https://nvd.nist.gov/vuln/detail/CVE-2020-15112)', '[CVE-2020-15136](https://nvd.nist.gov/vuln/detail/CVE-2020-15136)', '[CVE-2018-1099](https://nvd.nist.gov/vuln/detail/CVE-2018-1099)']
  
podman - ['[CVE-2023-25153](https://nvd.nist.gov/vuln/detail/CVE-2023-25153)', '[CVE-2022-23471](https://nvd.nist.gov/vuln/detail/CVE-2022-23471)']
  
kubernetes - ['[CVE-2023-2727](https://nvd.nist.gov/vuln/detail/CVE-2023-2727)', '[CVE-2023-25809](https://nvd.nist.gov/vuln/detail/CVE-2023-25809)', '[CVE-2023-32082](https://nvd.nist.gov/vuln/detail/CVE-2023-32082)', '[CVE-2023-0296](https://nvd.nist.gov/vuln/detail/CVE-2023-0296)', '[CVE-2023-2431](https://nvd.nist.gov/vuln/detail/CVE-2023-2431)', '[CVE-2023-2728](https://nvd.nist.gov/vuln/detail/CVE-2023-2728)']

### Low
  
curl - ['[CVE-2023-28322](https://nvd.nist.gov/vuln/detail/CVE-2023-28322)']

## Solution
  
Update the affected packages (tdnf update package)

## Updated Packages Information
  
curl-8.1.2-1.ph5.x86_64.rpm | size : 156K , sha256 : bf1dd4f634481043acec984d4f28888eb13a97c790c1604e62cd3863edba3506 , build time : Fri, 14 Jul 2023 00:07:10 UTC
  
curl-devel-8.1.2-1.ph5.x86_64.rpm | size : 808K , sha256 : ca4cd7fe7fb9bd2648662f7055033d2df766eafc41ba3967372f4f3f3391ed2c , build time : Fri, 14 Jul 2023 00:07:10 UTC
  
curl-libs-8.1.2-1.ph5.x86_64.rpm | size : 304K , sha256 : 99d6140ab24bb17d105531fbd35c4e2c697717beb8a3a36caac3e20469727c58 , build time : Fri, 14 Jul 2023 00:07:10 UTC
  
redis-7.0.12-1.ph5.x86_64.rpm | size : 1.4M , sha256 : 1643bdd2a04f7b7e36897590562a806d99622b366186e3d05b2e279ddc6f2aa5 , build time : Fri, 14 Jul 2023 00:08:40 UTC
  
flannel-0.22.0-1.ph5.x86_64.rpm | size : 8.8M , sha256 : 620c26a0fb191f8b1a3b102eac8e388819a3fca96d2f36a3f2f100286b4d6f82 , build time : Fri, 14 Jul 2023 00:07:13 UTC
  
calico-3.26.1-1.ph5.x86_64.rpm | size : 16M , sha256 : d75d4b07a23205a7ecf48edcba8f43583a634d0cfe1c4bc1f944dfe87ae11328 , build time : Fri, 14 Jul 2023 00:08:39 UTC
  
calico-cni-3.26.1-1.ph5.x86_64.rpm | size : 28M , sha256 : bc5646b123277ccbe77f61505a49ad74a54bd564da4114377f4f733f78ec46e5 , build time : Fri, 14 Jul 2023 00:08:39 UTC
  
calico-felix-3.26.1-1.ph5.x86_64.rpm | size : 15M , sha256 : 05e4dffd7222f03275bb942fa3c62a47232fe67ffbbb42d3e34e3a8297494218 , build time : Fri, 14 Jul 2023 00:08:39 UTC
  
calico-k8s-policy-3.26.1-1.ph5.x86_64.rpm | size : 11M , sha256 : 670f3606a2595c5cbe93da9bda7952ebdc4e35f62e629ac3bb5e66397a6aaf14 , build time : Fri, 14 Jul 2023 00:08:39 UTC
  
podman-4.5.1-1.ph5.x86_64.rpm | size : 15M , sha256 : 07f34271a70abda19bb549e5f3171c731390532dbf5dff7190c8926f8b0fbde7 , build time : Fri, 14 Jul 2023 00:10:44 UTC
  
podman-gvproxy-4.5.1-1.ph5.x86_64.rpm | size : 3.4M , sha256 : 50c2bec1dddeec5353ab20aaf43b9e23e0cf85b654aaddf983d88f4217fc71a2 , build time : Fri, 14 Jul 2023 00:10:44 UTC
  
podman-plugins-4.5.1-1.ph5.x86_64.rpm | size : 1.2M , sha256 : 6d8e045af8dff00b305d2265c37d5cd394187c18636a06e990772b5dd2aed14f , build time : Fri, 14 Jul 2023 00:10:44 UTC
  
podman-remote-4.5.1-1.ph5.x86_64.rpm | size : 9.5M , sha256 : c455d3ff1d7f9e2d8ffa40cabc67b557ee84e503ba4e3d27e9142ebb2123f4c8 , build time : Fri, 14 Jul 2023 00:10:44 UTC
  
podman-tests-4.5.1-1.ph5.x86_64.rpm | size : 152K , sha256 : f712271a6faa39c43e897d52cf7b8a7d183fe63bb16092ef10cdb5f12305f34d , build time : Fri, 14 Jul 2023 00:10:44 UTC
  
kubernetes-1.27.3-1.ph5.x86_64.rpm | size : 111M , sha256 : b6e2357b6ad089d1cff0ab14b200506ab22eb36f1860a81059b32079e4e7d287 , build time : Fri, 14 Jul 2023 00:08:50 UTC
  
kubernetes-kubeadm-1.27.3-1.ph5.x86_64.rpm | size : 11M , sha256 : 1516801b2b2f3165de06659808affa3e2026faadb73daa85fdd5a98fe88194ce , build time : Fri, 14 Jul 2023 00:08:50 UTC
  
kubernetes-pause-1.27.3-1.ph5.x86_64.rpm | size : 272K , sha256 : 1f760a590c73b78f31be7e0d49934650f709cb6e2de2be0d5abdaf246cb3bb3f , build time : Fri, 14 Jul 2023 00:08:50 UTC