Security Update 3.0 631

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2023-3.0-0631

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2023-08-11

Affected Release: 3.0

Details

Updates of ['flannel', 'nxtgn-openssl', 'calico', 'kubernetes', 'kubernetes-dns'] packages of Photon OS have been released.

Affected Packages

Critical

flannel - ['CVE-2021-28235']

calico - ['CVE-2021-28235']

kubernetes-dns - ['CVE-2021-28235']

Important

flannel - ['CVE-2020-15113', 'CVE-2020-15114', 'CVE-2020-15115', 'CVE-2018-1098']

calico - ['CVE-2020-15113', 'CVE-2020-15114', 'CVE-2020-15115', 'CVE-2018-1098']

kubernetes - ['CVE-2022-3172']

Moderate

flannel - ['CVE-2018-1099', 'CVE-2023-32082', 'CVE-2020-15112', 'CVE-2020-15106', 'CVE-2020-15136']

nxtgn-openssl - ['CVE-2023-3817']

calico - ['CVE-2018-1099', 'CVE-2023-0296', 'CVE-2023-32082', 'CVE-2020-15112', 'CVE-2020-15106', 'CVE-2022-28224', 'CVE-2020-15136']

kubernetes - ['CVE-2023-2728', 'CVE-2023-2431', 'CVE-2023-2727']

kubernetes-dns - ['CVE-2018-1099', 'CVE-2023-0296']

Low

kubernetes - ['CVE-2021-25743']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

flannel-0.22.0-1.ph3.x86_64.rpm | size : 12M , sha256 : b4bcd2e41d470f82d9340f3b97ae55e5acbfcb5934576f4fd71e27d76b93a069 , build time : Thu, 10 Aug 2023 15:58:46 UTC

nxtgn-openssl-1.1.1o-7.ph3.x86_64.rpm | size : 1.9M , sha256 : cc283b2d61622724b72175fc47bd8378bca61df5ea3b38a0ff4b0eb26bb55e25 , build time : Thu, 10 Aug 2023 16:18:00 UTC

nxtgn-openssl-c_rehash-1.1.1o-7.ph3.x86_64.rpm | size : 16K , sha256 : 20b3e6c31feccbb7f1c846d044435b8a1e0e5ee3298da9fe2fcb93bdebc8452a , build time : Thu, 10 Aug 2023 16:18:00 UTC

nxtgn-openssl-devel-1.1.1o-7.ph3.x86_64.rpm | size : 2.1M , sha256 : 274ee3d32fc489ade850c59b58db16211bb51dc8c06fc1e27dc5651d930c36fa , build time : Thu, 10 Aug 2023 16:18:00 UTC

nxtgn-openssl-perl-1.1.1o-7.ph3.x86_64.rpm | size : 16K , sha256 : c97c34e916457a85916240d351c51a5fde7379cbbccac1cc4e9c1e65067117f9 , build time : Thu, 10 Aug 2023 16:18:00 UTC

calico-3.26.1-1.ph3.x86_64.rpm | size : 20M , sha256 : a1168cde87306f77b392d877aec1a27dbc7c816c60cab67bdc48736aa5d6f714 , build time : Thu, 10 Aug 2023 15:56:24 UTC

calico-cni-3.26.1-1.ph3.x86_64.rpm | size : 38M , sha256 : f07a4df05cae0b174808ad10633e65ec221b6c2550874a5120b86dfd3d1a9286 , build time : Thu, 10 Aug 2023 15:56:24 UTC

calico-felix-3.26.1-1.ph3.x86_64.rpm | size : 20M , sha256 : e60c8e2f6ba1760cdc1f62bff11cf2f9e8c744951d25f44224841f0354511d4d , build time : Thu, 10 Aug 2023 15:56:24 UTC

calico-k8s-policy-3.26.1-1.ph3.x86_64.rpm | size : 15M , sha256 : 85c63d815df59f311e50e4a57395d291d24ec3601743a4afc184de6273c8b33f , build time : Thu, 10 Aug 2023 15:56:24 UTC

kubernetes-1.27.3-1.ph3.x86_64.rpm | size : 151M , sha256 : 6738fedbdba704f88114b5276f35a62e67b2b835b6f0a331a1213623364d9266 , build time : Thu, 10 Aug 2023 16:04:23 UTC

kubernetes-dashboard-2.7.0-1.ph3.x86_64.rpm | size : 62M , sha256 : 10811ab9c3a1deb9ec7ea293bb9768a33d05887e6cf75e0e5b83abe66ad438f8 , build time : Thu, 10 Aug 2023 15:57:12 UTC

kubernetes-dns-1.22.23-1.ph3.x86_64.rpm | size : 32M , sha256 : 63f38ee14d7625921a24a603c90b942fd5e4c87206566ed339a8f353a881793c , build time : Thu, 10 Aug 2023 15:54:52 UTC

kubernetes-kubeadm-1.27.3-1.ph3.x86_64.rpm | size : 14M , sha256 : c72613c5933f304221468d61dab836a3dc9b40a4d0d21efd0eb68927ea6ee414 , build time : Thu, 10 Aug 2023 16:04:23 UTC

kubernetes-pause-1.27.3-1.ph3.x86_64.rpm | size : 284K , sha256 : af8ede4ace7a7a5a4bbfdd4a174b1d721ad549a978a139a74ceeaa9dd0dba859 , build time : Thu, 10 Aug 2023 16:04:23 UTC

kubernetes-dns-1.22.23-1.ph3.x86_64.rpm | size : 32M , sha256 : 63f38ee14d7625921a24a603c90b942fd5e4c87206566ed339a8f353a881793c , build time : Thu, 10 Aug 2023 15:54:52 UTC