Security Update 4.0 823

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2025-4.0-0823

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2025-06-30

Affected Release: 4.0

Details

Updates of ['apache-tomcat9', 'coredns', 'krb5'] packages of Photon OS have been released.

Affected Packages

Critical

krb5 - ['CVE-2024-3596']

Important

apache-tomcat9 - ['CVE-2025-49125', 'CVE-2025-49124', 'CVE-2025-48988']

coredns - ['CVE-2025-47950']

Moderate

apache-tomcat9 - ['CVE-2025-46701']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

apache-tomcat9-9.0.106-1.ph4.noarch.rpm | size : 9.1M , sha256 : 9b2f2f91d85b1972408ee51f68aef7ffabed09d265a44df2721ce050dddde9e7 , build time : Mon, 30 Jun 2025 09:51:27 UTC

apache-tomcat9-webapps-9.0.106-1.ph4.noarch.rpm | size : 100K , sha256 : 112d0e5c4e6c3bbb440b466ce28a0917ec0c7f4fb96baba349ff031b437119b8 , build time : Mon, 30 Jun 2025 09:51:27 UTC

coredns-1.11.1-7.ph4.x86_64.rpm | size : 12M , sha256 : efe6f32c1809228f1d9b4948405aac3afd7d3e2a73a02812e35436a621e303f7 , build time : Mon, 30 Jun 2025 09:52:39 UTC

krb5-1.17-14.ph4.x86_64.rpm | size : 1.2M , sha256 : 61f9bc181cfa54325003b07ed42aea0e278c563ca7288948749fcea60435eeae , build time : Mon, 30 Jun 2025 09:51:12 UTC

krb5-devel-1.17-14.ph4.x86_64.rpm | size : 136K , sha256 : 65b3630df3898245031cbb407876ec4151519ea91e358d134887d316d3783702 , build time : Mon, 30 Jun 2025 09:51:12 UTC

krb5-lang-1.17-14.ph4.x86_64.rpm | size : 64K , sha256 : 40291457910906ac3479a3734c0da7713f56a967beb43e9d6c43d602f7682afd , build time : Mon, 30 Jun 2025 09:51:12 UTC