Security Update 4.0 804

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2025-4.0-0804

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2025-05-21

Affected Release: 4.0

Details

Updates of ['dotnet-runtime', 'rubygem-kubeclient', 'rubygem-jmespath', 'dotnet-sdk'] packages of Photon OS have been released.

Affected Packages

Critical

dotnet-runtime - ['CVE-2024-0057', 'CVE-2023-36049']

rubygem-jmespath - ['CVE-2022-32511']

dotnet-sdk - ['CVE-2024-0057']

Important

dotnet-runtime - ['CVE-2023-29337', 'CVE-2023-35390', 'CVE-2023-24897', 'CVE-2023-21808', 'CVE-2023-28260', 'CVE-2023-24895', 'CVE-2023-24936', 'CVE-2023-35391', 'CVE-2023-36793', 'CVE-2023-29331', 'CVE-2023-36794', 'CVE-2023-36796', 'CVE-2024-43485', 'CVE-2024-43483', 'CVE-2024-21409', 'CVE-2023-21538', 'CVE-2022-41032', 'CVE-2023-33170', 'CVE-2023-36792', 'CVE-2023-33128', 'CVE-2024-38081', 'CVE-2023-33126', 'CVE-2023-38180', 'CVE-2023-44487', 'CVE-2023-33127', 'CVE-2024-0056', 'CVE-2024-20672', 'CVE-2024-43484', 'CVE-2024-21404', 'CVE-2023-33135', 'CVE-2022-38013']

rubygem-kubeclient - ['CVE-2022-0759']

dotnet-sdk - ['CVE-2023-35390', 'CVE-2022-24464', 'CVE-2023-21808', 'CVE-2023-28260', 'CVE-2019-0981', 'CVE-2021-31204', 'CVE-2019-0820', 'CVE-2022-29145', 'CVE-2020-1108', 'CVE-2019-0545', 'CVE-2019-0564', 'CVE-2024-21409', 'CVE-2020-1597', 'CVE-2018-8409', 'CVE-2019-1301', 'CVE-2019-0980', 'CVE-2022-41032', 'CVE-2021-24112', 'CVE-2022-29117', 'CVE-2020-1045', 'CVE-2022-23267', 'CVE-2020-1147', 'CVE-2023-33127', 'CVE-2024-0056', 'CVE-2024-20672', 'CVE-2021-26701', 'CVE-2022-38013', 'CVE-2021-26423']

Moderate

dotnet-runtime - ['CVE-2024-21319', 'CVE-2022-30184', 'CVE-2022-34716', 'CVE-2023-36558', 'CVE-2023-36799']

dotnet-sdk - ['CVE-2021-31957', 'CVE-2021-1721', 'CVE-2019-0548', 'CVE-2022-30184', 'CVE-2022-34716', 'CVE-2019-0757', 'CVE-2022-24512', 'CVE-2018-8416', 'CVE-2019-0657', 'CVE-2021-34485']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

dotnet-runtime-6.0.36-1.ph4.x86_64.rpm | size : 24M , sha256 : a43d9bb24bad8ed88d09b3b079390f0a0f1d2a3a12b329003d1f514228f6e5c6 , build time : Wed, 21 May 2025 19:48:51 UTC

rubygem-kubeclient-4.9.3-1.ph4.noarch.rpm | size : 104K , sha256 : d3e16d826c952bed6acf9bb3f07b353cf4e5f5f217cd182f550be581dbb6db3d , build time : Wed, 21 May 2025 19:48:58 UTC

rubygem-jmespath-1.6.1-1.ph4.x86_64.rpm | size : 112K , sha256 : 5472cde05a5b20c1e6e4dab0b2b205586abd786b698ae014e904d2ae092e7da4 , build time : Wed, 21 May 2025 19:48:56 UTC

dotnet-sdk-6.0.428-1.ph4.x86_64.rpm | size : 90M , sha256 : b512e15888e66d6dddb99823193eb064c267cfebeefdf306ff11a96dceb5e4cd , build time : Wed, 21 May 2025 19:49:37 UTC