# Critical Photon OS Security Update ## Summary Advisory Id : PHSA-2025-5.0-91-0590 Type : Security Severity : ['Critical', 'Important', 'Moderate', 'Low'] Issue date : 2025-08-18 Affected Release: 5.0-91 ## Details Updates of ['git'] packages of Photon OS have been released. ## Affected Packages ### Critical git - ['[CVE-2022-41903](https://nvd.nist.gov/vuln/detail/CVE-2022-41903)', '[CVE-2016-2324](https://nvd.nist.gov/vuln/detail/CVE-2016-2324)', '[CVE-2018-19486](https://nvd.nist.gov/vuln/detail/CVE-2018-19486)', '[CVE-2018-17456](https://nvd.nist.gov/vuln/detail/CVE-2018-17456)', '[CVE-2014-9390](https://nvd.nist.gov/vuln/detail/CVE-2014-9390)', '[CVE-2015-7545](https://nvd.nist.gov/vuln/detail/CVE-2015-7545)', '[CVE-2022-23521](https://nvd.nist.gov/vuln/detail/CVE-2022-23521)', '[CVE-2015-7082](https://nvd.nist.gov/vuln/detail/CVE-2015-7082)', '[CVE-2019-1353](https://nvd.nist.gov/vuln/detail/CVE-2019-1353)'] ### Important git - ['[CVE-2017-1000117](https://nvd.nist.gov/vuln/detail/CVE-2017-1000117)', '[CVE-2025-46334](https://nvd.nist.gov/vuln/detail/CVE-2025-46334)', '[CVE-2025-27614](https://nvd.nist.gov/vuln/detail/CVE-2025-27614)', '[CVE-2017-14867](https://nvd.nist.gov/vuln/detail/CVE-2017-14867)', '[CVE-2018-11235](https://nvd.nist.gov/vuln/detail/CVE-2018-11235)', '[CVE-2022-41953](https://nvd.nist.gov/vuln/detail/CVE-2022-41953)', '[CVE-2023-25652](https://nvd.nist.gov/vuln/detail/CVE-2023-25652)', '[CVE-2018-11233](https://nvd.nist.gov/vuln/detail/CVE-2018-11233)', '[CVE-2022-24765](https://nvd.nist.gov/vuln/detail/CVE-2022-24765)', '[CVE-2019-1349](https://nvd.nist.gov/vuln/detail/CVE-2019-1349)', '[CVE-2020-11008](https://nvd.nist.gov/vuln/detail/CVE-2020-11008)', '[CVE-2021-40330](https://nvd.nist.gov/vuln/detail/CVE-2021-40330)', '[CVE-2021-21300](https://nvd.nist.gov/vuln/detail/CVE-2021-21300)', '[CVE-2023-23946](https://nvd.nist.gov/vuln/detail/CVE-2023-23946)', '[CVE-2019-1352](https://nvd.nist.gov/vuln/detail/CVE-2019-1352)', '[CVE-2025-46835](https://nvd.nist.gov/vuln/detail/CVE-2025-46835)', '[CVE-2023-29007](https://nvd.nist.gov/vuln/detail/CVE-2023-29007)', '[CVE-2024-52006](https://nvd.nist.gov/vuln/detail/CVE-2024-52006)', '[CVE-2022-39260](https://nvd.nist.gov/vuln/detail/CVE-2022-39260)', '[CVE-2022-31012](https://nvd.nist.gov/vuln/detail/CVE-2022-31012)', '[CVE-2018-1000021](https://nvd.nist.gov/vuln/detail/CVE-2018-1000021)', '[CVE-2022-29187](https://nvd.nist.gov/vuln/detail/CVE-2022-29187)', '[CVE-2020-5260](https://nvd.nist.gov/vuln/detail/CVE-2020-5260)', '[CVE-2019-19604](https://nvd.nist.gov/vuln/detail/CVE-2019-19604)', '[CVE-2021-46101](https://nvd.nist.gov/vuln/detail/CVE-2021-46101)', '[CVE-2022-24767](https://nvd.nist.gov/vuln/detail/CVE-2022-24767)', '[CVE-2019-1387](https://nvd.nist.gov/vuln/detail/CVE-2019-1387)', '[CVE-2017-8386](https://nvd.nist.gov/vuln/detail/CVE-2017-8386)'] ### Moderate git - ['[CVE-2023-22490](https://nvd.nist.gov/vuln/detail/CVE-2023-22490)', '[CVE-2024-50349](https://nvd.nist.gov/vuln/detail/CVE-2024-50349)', '[CVE-2022-39253](https://nvd.nist.gov/vuln/detail/CVE-2022-39253)', '[CVE-2025-48386](https://nvd.nist.gov/vuln/detail/CVE-2025-48386)', '[CVE-2017-15298](https://nvd.nist.gov/vuln/detail/CVE-2017-15298)'] ### Low git - ['[CVE-2025-27613](https://nvd.nist.gov/vuln/detail/CVE-2025-27613)', '[CVE-2019-1348](https://nvd.nist.gov/vuln/detail/CVE-2019-1348)', '[CVE-2023-25815](https://nvd.nist.gov/vuln/detail/CVE-2023-25815)'] ## Solution Update the affected packages (tdnf update package) ## Updated Packages Information git-2.43.7-1.ph5.x86_64.rpm | size : 4.2M , sha256 : 379e26c0f300e2293c6619f384a9b37cd76df4383cee86605c1007709bc6d562 , build time : Mon, 18 Aug 2025 08:05:46 UTC git-extras-2.43.7-1.ph5.x86_64.rpm | size : 580K , sha256 : c339a47bfff7eca528da79f2a19043a9f3d9b6fa3640e0f6f6d59a7bbb625f35 , build time : Mon, 18 Aug 2025 08:05:46 UTC git-lang-2.43.7-1.ph5.x86_64.rpm | size : 1.7M , sha256 : 1f84cc6d625b9bfe8e579357eb27406d4eaa7aa7d101de397f77a676e18678a7 , build time : Mon, 18 Aug 2025 08:05:46 UTC