Security Update 4.0 807

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2025-4.0-0807

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2025-05-29

Affected Release: 4.0

Details

Updates of ['python3-mako', 'nodejs', 'rubygem-nokogiri', 'libsoup', 'gobgp'] packages of Photon OS have been released.

Affected Packages

Critical

libsoup - ['CVE-2025-32911']

gobgp - ['CVE-2025-43973']

Important

python3-mako - ['CVE-2022-40023']

nodejs - ['CVE-2025-23166']

rubygem-nokogiri - ['CVE-2018-25032', 'CVE-2022-29181', 'CVE-2021-30560', 'CVE-2022-24836']

libsoup - ['CVE-2025-32914', 'CVE-2025-32906', 'CVE-2025-32913']

Moderate

libsoup - ['CVE-2025-46420', 'CVE-2025-32052', 'CVE-2025-32907', 'CVE-2025-32053', 'CVE-2025-4476', 'CVE-2025-32909', 'CVE-2025-2784', 'CVE-2025-32910', 'CVE-2025-32050']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

python3-mako-1.1.3-4.ph4.noarch.rpm | size : 132K , sha256 : e3683a92a1de8606b8276e7c6dd337b3183f7bc9853401805d6101492f5193f1 , build time : Thu, 29 May 2025 07:02:59 UTC

nodejs-18.20.8-2.ph4.x86_64.rpm | size : 25M , sha256 : a32600096b7c352af9d30513652dd7e4a2c34bf1d3ecfaaeb9bace8a03055e86 , build time : Thu, 29 May 2025 07:03:02 UTC

nodejs-devel-18.20.8-2.ph4.x86_64.rpm | size : 872K , sha256 : 011ae4420bfa48db11b34e5a76713cfb9de5af78d67c3f668fbec28ad4c964f6 , build time : Thu, 29 May 2025 07:03:02 UTC

rubygem-nokogiri-1.13.6-1.ph4.x86_64.rpm | size : 6.7M , sha256 : ea1e1c8ac3d13b8f62be6322e77ceac69aa9f97bb9da3e21919b6dace0152011 , build time : Thu, 29 May 2025 07:04:00 UTC

libsoup-2.72.0-16.ph4.x86_64.rpm | size : 248K , sha256 : 030efbb0ba83118fd74a42ef3d0eb0257e518d11cac42d3b1ae3394f731e49af , build time : Thu, 29 May 2025 07:03:25 UTC

libsoup-devel-2.72.0-16.ph4.x86_64.rpm | size : 48K , sha256 : 1a14055d7235a37472cb464ea5f50d5d2562cbf72004d1ab8d03115f15912f15 , build time : Thu, 29 May 2025 07:03:25 UTC

libsoup-doc-2.72.0-16.ph4.x86_64.rpm | size : 12K , sha256 : a7055f5884ddf5cf61e9a4f576bee3e2792703bbbc1e1a7d598fb58b9a44be8f , build time : Thu, 29 May 2025 07:03:25 UTC

libsoup-lang-2.72.0-16.ph4.x86_64.rpm | size : 72K , sha256 : d527561699bdec72558575581f3222fc52718a822ea1639590535d111f4c3c8d , build time : Thu, 29 May 2025 07:03:25 UTC

gobgp-2.20.0-27.ph4.x86_64.rpm | size : 7.8M , sha256 : ab8bd0053ecf79664030bc8cf8421bad6ffa1b635697de02a054d7a36c96cd5b , build time : Thu, 29 May 2025 07:03:11 UTC