# Critical Photon OS Security Update

## Summary
  
Advisory Id     : PHSA-2023-5.0-91-0009
  
Type            : Security
  
Severity        : ['Critical', 'Important', 'Moderate', 'Low']
  
Issue date      : 2023-05-22
  
Affected Release: 5.0-91

## Details
  
Updates of ['influxdb', 'linux-rt', 'linux', 'linux-secure', 'tcpdump', 'vim', 'linux-esx', 'haproxy'] packages of Photon OS have been released.
## Affected Packages

### Critical
  
influxdb - ['[CVE-2022-36640](https://nvd.nist.gov/vuln/detail/CVE-2022-36640)']
  
haproxy - ['[CVE-2023-25725](https://nvd.nist.gov/vuln/detail/CVE-2023-25725)']

### Important
  
linux-rt - ['[CVE-2023-1078](https://nvd.nist.gov/vuln/detail/CVE-2023-1078)', '[CVE-2022-48872](https://nvd.nist.gov/vuln/detail/CVE-2022-48872)', '[CVE-2023-1989](https://nvd.nist.gov/vuln/detail/CVE-2023-1989)', '[CVE-2023-1281](https://nvd.nist.gov/vuln/detail/CVE-2023-1281)', '[CVE-2023-2156](https://nvd.nist.gov/vuln/detail/CVE-2023-2156)', '[CVE-2023-1829](https://nvd.nist.gov/vuln/detail/CVE-2023-1829)', '[CVE-2023-31436](https://nvd.nist.gov/vuln/detail/CVE-2023-31436)']
  
linux - ['[CVE-2023-1078](https://nvd.nist.gov/vuln/detail/CVE-2023-1078)', '[CVE-2023-1281](https://nvd.nist.gov/vuln/detail/CVE-2023-1281)', '[CVE-2023-28466](https://nvd.nist.gov/vuln/detail/CVE-2023-28466)', '[CVE-2022-2196](https://nvd.nist.gov/vuln/detail/CVE-2022-2196)', '[CVE-2023-1989](https://nvd.nist.gov/vuln/detail/CVE-2023-1989)', '[CVE-2023-1829](https://nvd.nist.gov/vuln/detail/CVE-2023-1829)', '[CVE-2023-2156](https://nvd.nist.gov/vuln/detail/CVE-2023-2156)', '[CVE-2023-31436](https://nvd.nist.gov/vuln/detail/CVE-2023-31436)']
  
linux-secure - ['[CVE-2023-1078](https://nvd.nist.gov/vuln/detail/CVE-2023-1078)', '[CVE-2023-1281](https://nvd.nist.gov/vuln/detail/CVE-2023-1281)', '[CVE-2022-2196](https://nvd.nist.gov/vuln/detail/CVE-2022-2196)', '[CVE-2023-2156](https://nvd.nist.gov/vuln/detail/CVE-2023-2156)', '[CVE-2023-28466](https://nvd.nist.gov/vuln/detail/CVE-2023-28466)', '[CVE-2023-1829](https://nvd.nist.gov/vuln/detail/CVE-2023-1829)', '[CVE-2023-31436](https://nvd.nist.gov/vuln/detail/CVE-2023-31436)']
  
vim - ['[CVE-2023-1127](https://nvd.nist.gov/vuln/detail/CVE-2023-1127)', '[CVE-2023-2610](https://nvd.nist.gov/vuln/detail/CVE-2023-2610)']
  
linux-esx - ['[CVE-2022-48872](https://nvd.nist.gov/vuln/detail/CVE-2022-48872)', '[CVE-2023-2156](https://nvd.nist.gov/vuln/detail/CVE-2023-2156)']

### Moderate
  
linux-rt - ['[CVE-2022-27672](https://nvd.nist.gov/vuln/detail/CVE-2022-27672)', '[CVE-2023-0160](https://nvd.nist.gov/vuln/detail/CVE-2023-0160)', '[CVE-2023-28866](https://nvd.nist.gov/vuln/detail/CVE-2023-28866)', '[CVE-2023-2248](https://nvd.nist.gov/vuln/detail/CVE-2023-2248)', '[CVE-2023-1076](https://nvd.nist.gov/vuln/detail/CVE-2023-1076)', '[CVE-2023-2269](https://nvd.nist.gov/vuln/detail/CVE-2023-2269)', '[CVE-2023-26545](https://nvd.nist.gov/vuln/detail/CVE-2023-26545)', '[CVE-2022-4269](https://nvd.nist.gov/vuln/detail/CVE-2022-4269)', '[CVE-2023-1611](https://nvd.nist.gov/vuln/detail/CVE-2023-1611)']
  
linux - ['[CVE-2023-3220](https://nvd.nist.gov/vuln/detail/CVE-2023-3220)', '[CVE-2023-30456](https://nvd.nist.gov/vuln/detail/CVE-2023-30456)', '[CVE-2023-33951](https://nvd.nist.gov/vuln/detail/CVE-2023-33951)', '[CVE-2023-2002](https://nvd.nist.gov/vuln/detail/CVE-2023-2002)', '[CVE-2023-1611](https://nvd.nist.gov/vuln/detail/CVE-2023-1611)', '[CVE-2023-2269](https://nvd.nist.gov/vuln/detail/CVE-2023-2269)', '[CVE-2023-7192](https://nvd.nist.gov/vuln/detail/CVE-2023-7192)', '[CVE-2023-1990](https://nvd.nist.gov/vuln/detail/CVE-2023-1990)', '[CVE-2023-28866](https://nvd.nist.gov/vuln/detail/CVE-2023-28866)', '[CVE-2023-30772](https://nvd.nist.gov/vuln/detail/CVE-2023-30772)', '[CVE-2023-33952](https://nvd.nist.gov/vuln/detail/CVE-2023-33952)', '[CVE-2023-1859](https://nvd.nist.gov/vuln/detail/CVE-2023-1859)', '[CVE-2023-3359](https://nvd.nist.gov/vuln/detail/CVE-2023-3359)', '[CVE-2023-1998](https://nvd.nist.gov/vuln/detail/CVE-2023-1998)', '[CVE-2023-33203](https://nvd.nist.gov/vuln/detail/CVE-2023-33203)', '[CVE-2023-2985](https://nvd.nist.gov/vuln/detail/CVE-2023-2985)', '[CVE-2023-26545](https://nvd.nist.gov/vuln/detail/CVE-2023-26545)', '[CVE-2022-27672](https://nvd.nist.gov/vuln/detail/CVE-2022-27672)', '[CVE-2023-0160](https://nvd.nist.gov/vuln/detail/CVE-2023-0160)', '[CVE-2023-1079](https://nvd.nist.gov/vuln/detail/CVE-2023-1079)', '[CVE-2023-33288](https://nvd.nist.gov/vuln/detail/CVE-2023-33288)', '[CVE-2023-2194](https://nvd.nist.gov/vuln/detail/CVE-2023-2194)', '[CVE-2023-2248](https://nvd.nist.gov/vuln/detail/CVE-2023-2248)', '[CVE-2023-45862](https://nvd.nist.gov/vuln/detail/CVE-2023-45862)', '[CVE-2023-1076](https://nvd.nist.gov/vuln/detail/CVE-2023-1076)', '[CVE-2023-45863](https://nvd.nist.gov/vuln/detail/CVE-2023-45863)', '[CVE-2023-1032](https://nvd.nist.gov/vuln/detail/CVE-2023-1032)', '[CVE-2023-2162](https://nvd.nist.gov/vuln/detail/CVE-2023-2162)', '[CVE-2023-3161](https://nvd.nist.gov/vuln/detail/CVE-2023-3161)', '[CVE-2022-4269](https://nvd.nist.gov/vuln/detail/CVE-2022-4269)', '[CVE-2023-38409](https://nvd.nist.gov/vuln/detail/CVE-2023-38409)']
  
linux-secure - ['[CVE-2023-30456](https://nvd.nist.gov/vuln/detail/CVE-2023-30456)', '[CVE-2023-0160](https://nvd.nist.gov/vuln/detail/CVE-2023-0160)', '[CVE-2022-27672](https://nvd.nist.gov/vuln/detail/CVE-2022-27672)', '[CVE-2023-2248](https://nvd.nist.gov/vuln/detail/CVE-2023-2248)', '[CVE-2023-1076](https://nvd.nist.gov/vuln/detail/CVE-2023-1076)', '[CVE-2023-2269](https://nvd.nist.gov/vuln/detail/CVE-2023-2269)', '[CVE-2023-26545](https://nvd.nist.gov/vuln/detail/CVE-2023-26545)', '[CVE-2022-4269](https://nvd.nist.gov/vuln/detail/CVE-2022-4269)', '[CVE-2023-1611](https://nvd.nist.gov/vuln/detail/CVE-2023-1611)']
  
tcpdump - ['[CVE-2023-1801](https://nvd.nist.gov/vuln/detail/CVE-2023-1801)']
  
vim - ['[CVE-2023-1170](https://nvd.nist.gov/vuln/detail/CVE-2023-1170)', '[CVE-2023-1264](https://nvd.nist.gov/vuln/detail/CVE-2023-1264)', '[CVE-2023-2426](https://nvd.nist.gov/vuln/detail/CVE-2023-2426)', '[CVE-2023-1175](https://nvd.nist.gov/vuln/detail/CVE-2023-1175)', '[CVE-2023-1355](https://nvd.nist.gov/vuln/detail/CVE-2023-1355)', '[CVE-2023-2609](https://nvd.nist.gov/vuln/detail/CVE-2023-2609)']
  
linux-esx - ['[CVE-2023-3220](https://nvd.nist.gov/vuln/detail/CVE-2023-3220)', '[CVE-2023-30456](https://nvd.nist.gov/vuln/detail/CVE-2023-30456)', '[CVE-2023-33951](https://nvd.nist.gov/vuln/detail/CVE-2023-33951)', '[CVE-2023-2002](https://nvd.nist.gov/vuln/detail/CVE-2023-2002)', '[CVE-2023-7192](https://nvd.nist.gov/vuln/detail/CVE-2023-7192)', '[CVE-2023-1990](https://nvd.nist.gov/vuln/detail/CVE-2023-1990)', '[CVE-2023-28866](https://nvd.nist.gov/vuln/detail/CVE-2023-28866)', '[CVE-2023-30772](https://nvd.nist.gov/vuln/detail/CVE-2023-30772)', '[CVE-2023-33952](https://nvd.nist.gov/vuln/detail/CVE-2023-33952)', '[CVE-2023-1859](https://nvd.nist.gov/vuln/detail/CVE-2023-1859)', '[CVE-2023-3359](https://nvd.nist.gov/vuln/detail/CVE-2023-3359)', '[CVE-2023-1998](https://nvd.nist.gov/vuln/detail/CVE-2023-1998)', '[CVE-2023-33203](https://nvd.nist.gov/vuln/detail/CVE-2023-33203)', '[CVE-2023-2985](https://nvd.nist.gov/vuln/detail/CVE-2023-2985)', '[CVE-2023-0160](https://nvd.nist.gov/vuln/detail/CVE-2023-0160)', '[CVE-2023-1079](https://nvd.nist.gov/vuln/detail/CVE-2023-1079)', '[CVE-2023-33288](https://nvd.nist.gov/vuln/detail/CVE-2023-33288)', '[CVE-2023-2194](https://nvd.nist.gov/vuln/detail/CVE-2023-2194)', '[CVE-2023-45862](https://nvd.nist.gov/vuln/detail/CVE-2023-45862)', '[CVE-2023-45863](https://nvd.nist.gov/vuln/detail/CVE-2023-45863)', '[CVE-2023-1032](https://nvd.nist.gov/vuln/detail/CVE-2023-1032)', '[CVE-2023-2162](https://nvd.nist.gov/vuln/detail/CVE-2023-2162)', '[CVE-2023-3161](https://nvd.nist.gov/vuln/detail/CVE-2023-3161)', '[CVE-2023-38409](https://nvd.nist.gov/vuln/detail/CVE-2023-38409)']

### Low
  
linux - ['[CVE-2023-1513](https://nvd.nist.gov/vuln/detail/CVE-2023-1513)']
  
linux-secure - ['[CVE-2023-1513](https://nvd.nist.gov/vuln/detail/CVE-2023-1513)']
  
linux-esx - ['[CVE-2023-1513](https://nvd.nist.gov/vuln/detail/CVE-2023-1513)']

## Solution
  
Update the affected packages (tdnf update package)
  
Note: For packages ['linux-rt', 'linux', 'linux-secure', 'linux-esx'] after updating, a reboot is required for taking effect.
## Updated Packages Information
  
influxdb-1.8.10-1.ph5.x86_64.rpm | size : 29M , sha256 : fff2b6098bc0290ec94d6294549f4a1b8b41be616def135310aed9f85d3d7a12 , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-rt-6.1.28-1.ph5.x86_64.rpm | size : 32M , sha256 : 4342bbcdbd6b785b9bd77c260f53cc17ff023f0f319bb51067a515973a29a906 , build time : Mon, 22 May 2023 16:57:01 UTC
  
linux-rt-devel-6.1.28-1.ph5.x86_64.rpm | size : 12M , sha256 : c4f80122e769e00ce78ef09e7341e69baa8b5f89ad2c4c1b87a9a8f16eb7b1a4 , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-rt-docs-6.1.28-1.ph5.x86_64.rpm | size : 9.2M , sha256 : 82e06cace1766aafff38e8c005f6998366cc3dfdc322dab533a25d6a9da3ca82 , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-6.1.28-1.ph5.x86_64.rpm | size : 34M , sha256 : 5d028f671dc4685c04e1c3781901d1641854aa361b07f05841bd80e739a8efaf , build time : Mon, 22 May 2023 16:55:24 UTC
  
linux-api-headers-6.1.28-1.ph5.noarch.rpm | size : 1.4M , sha256 : ba4a92d8542d646daee29e102d8b4ad3cfca778f9a06c1a165346f14ec08dcda , build time : Mon, 22 May 2023 15:16:16 UTC
  
linux-devel-6.1.28-1.ph5.x86_64.rpm | size : 12M , sha256 : 930167b1662bdb33299a7d25ddf3da0f6842723080341d51555a46007799af34 , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-docs-6.1.28-1.ph5.x86_64.rpm | size : 9.3M , sha256 : 1712cd7523f8a3c8b177932e5913f5d23493615a4defb5426d058e7fd55cf117 , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-drivers-gpu-6.1.28-1.ph5.x86_64.rpm | size : 4.8M , sha256 : 2aab72c23c24369fb10465b61d0b704bf6173f817cb13a8decb483ea14d1a0ec , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-drivers-sound-6.1.28-1.ph5.x86_64.rpm | size : 720K , sha256 : e04dcddaf11660138dfd2d4edf0676bdd33b32c099c2b740e079d6150af570a8 , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-esx-6.1.28-1.ph5.x86_64.rpm | size : 17M , sha256 : e86fd670359bfe47273d63c11466e4fd4beaa45c89c7b6b8a097d12b898b2a9e , build time : Mon, 22 May 2023 16:55:24 UTC
  
linux-esx-devel-6.1.28-1.ph5.x86_64.rpm | size : 12M , sha256 : f8340673f75d1bec563bb75db223d6025cf89bcd7c43d7bc7359fa422484e04f , build time : Mon, 22 May 2023 15:22:16 UTC
  
linux-esx-docs-6.1.28-1.ph5.x86_64.rpm | size : 9.3M , sha256 : 2a8fb683de00083d7cf99444249a9aa4ad353005b620cb5643a09884a8663c82 , build time : Mon, 22 May 2023 15:22:16 UTC
  
linux-python3-perf-6.1.28-1.ph5.x86_64.rpm | size : 196K , sha256 : b2d54c4cacddd0c24880e5257e8985b9f0a5ec79d38fbfced12a3b27897ce3bb , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-rt-6.1.28-1.ph5.x86_64.rpm | size : 32M , sha256 : 4342bbcdbd6b785b9bd77c260f53cc17ff023f0f319bb51067a515973a29a906 , build time : Mon, 22 May 2023 16:57:01 UTC
  
linux-rt-devel-6.1.28-1.ph5.x86_64.rpm | size : 12M , sha256 : c4f80122e769e00ce78ef09e7341e69baa8b5f89ad2c4c1b87a9a8f16eb7b1a4 , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-rt-docs-6.1.28-1.ph5.x86_64.rpm | size : 9.2M , sha256 : 82e06cace1766aafff38e8c005f6998366cc3dfdc322dab533a25d6a9da3ca82 , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-secure-6.1.28-2.ph5.x86_64.rpm | size : 29M , sha256 : 44e5c18861c0ac536a5c50ca2df283f9f7882acb41f571cfa4b386192ac938b6 , build time : Mon, 22 May 2023 16:56:58 UTC
  
linux-secure-devel-6.1.28-2.ph5.x86_64.rpm | size : 12M , sha256 : b88e950e5a989d3a106a0ac304bd07766601a771a613a6798e7aef7540b18265 , build time : Mon, 22 May 2023 15:22:15 UTC
  
linux-secure-docs-6.1.28-2.ph5.x86_64.rpm | size : 9.3M , sha256 : 1f339fc6f1c0f429ececd16e570da515e60ae6f3e1d519af9eb0c9cd50b870ac , build time : Mon, 22 May 2023 15:22:15 UTC
  
linux-tools-6.1.28-1.ph5.x86_64.rpm | size : 2.2M , sha256 : 18d5b7c58839ae7ac40630abae0932cc993f9764e8daf9526303f963e90ac9ed , build time : Mon, 22 May 2023 15:23:05 UTC
  
linux-secure-6.1.28-2.ph5.x86_64.rpm | size : 29M , sha256 : 44e5c18861c0ac536a5c50ca2df283f9f7882acb41f571cfa4b386192ac938b6 , build time : Mon, 22 May 2023 16:56:58 UTC
  
linux-secure-devel-6.1.28-2.ph5.x86_64.rpm | size : 12M , sha256 : b88e950e5a989d3a106a0ac304bd07766601a771a613a6798e7aef7540b18265 , build time : Mon, 22 May 2023 15:22:15 UTC
  
linux-secure-docs-6.1.28-2.ph5.x86_64.rpm | size : 9.3M , sha256 : 1f339fc6f1c0f429ececd16e570da515e60ae6f3e1d519af9eb0c9cd50b870ac , build time : Mon, 22 May 2023 15:22:15 UTC
  
tcpdump-4.99.4-1.ph5.x86_64.rpm | size : 468K , sha256 : da8be813cc44b406e971496ff1e561e4187edbfe34602cf84c88d223ba141784 , build time : Mon, 22 May 2023 15:24:37 UTC
  
vim-9.0.1532-1.ph5.x86_64.rpm | size : 1.6M , sha256 : 4c9fefb8ff19491ac4c10af2712d0df7acaaf84eaf9baf781d9726c0d577e7dc , build time : Mon, 22 May 2023 15:22:03 UTC
  
vim-extra-9.0.1532-1.ph5.x86_64.rpm | size : 7.4M , sha256 : 237be74bebece52c0606f218f5cb4d3d094917399b7a4ad574ba2886d3492473 , build time : Mon, 22 May 2023 15:22:03 UTC
  
linux-esx-6.1.28-1.ph5.x86_64.rpm | size : 17M , sha256 : e86fd670359bfe47273d63c11466e4fd4beaa45c89c7b6b8a097d12b898b2a9e , build time : Mon, 22 May 2023 16:55:24 UTC
  
linux-esx-devel-6.1.28-1.ph5.x86_64.rpm | size : 12M , sha256 : f8340673f75d1bec563bb75db223d6025cf89bcd7c43d7bc7359fa422484e04f , build time : Mon, 22 May 2023 15:22:16 UTC
  
linux-esx-docs-6.1.28-1.ph5.x86_64.rpm | size : 9.3M , sha256 : 2a8fb683de00083d7cf99444249a9aa4ad353005b620cb5643a09884a8663c82 , build time : Mon, 22 May 2023 15:22:16 UTC
  
haproxy-2.7.3-1.ph5.x86_64.rpm | size : 1.1M , sha256 : 58ebb19492d1778019a63d2a278bdac89fe366e0ffe5818a25a39616f3618163 , build time : Mon, 22 May 2023 15:22:49 UTC
  
haproxy-dataplaneapi-2.7.1-4.ph5.x86_64.rpm | size : 6.6M , sha256 : be8523b061f0cf24955772145ceb6e5ac512772891803a27a80996608d4fbef4 , build time : Mon, 22 May 2023 15:27:07 UTC
  
haproxy-doc-2.7.3-1.ph5.x86_64.rpm | size : 392K , sha256 : c351edd1f1c2f6f4afa0f8feab34b2a4e9366059955e3e6c28d484de6d6f7520 , build time : Mon, 22 May 2023 15:22:49 UTC