Security Update 4.0 765

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2025-4.0-0765

Type : Security

Severity : ['Critical', 'Important']

Issue date : 2025-03-06

Affected Release: 4.0

Details

Updates of ['libxml2', 'gettext', 'rubygem-activesupport'] packages of Photon OS have been released.

Affected Packages

Critical

rubygem-activesupport - ['CVE-2024-28103']

Important

libxml2 - ['CVE-2025-24928', 'CVE-2024-56171', 'CVE-2025-27113']

gettext - ['CVE-2025-24928', 'CVE-2024-56171', 'CVE-2025-27113']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

libxml2-2.9.12-15.ph4.x86_64.rpm | size : 640K , sha256 : 35fcb1ba799f57567c21979a109094ab424ef68cdc42fbbf58b157d5a0640074 , build time : Thu, 06 Mar 2025 04:52:29 UTC

libxml2-devel-2.9.12-15.ph4.x86_64.rpm | size : 628K , sha256 : 96281b6469f8710dcf8532f90ab4196a3fd07f141f14451cb42627f6af030f2e , build time : Thu, 06 Mar 2025 04:52:29 UTC

gettext-0.21-5.ph4.x86_64.rpm | size : 2.8M , sha256 : 611f4ab8637b288648c88ae99cae1d9265306341e0b3f21a775b08553ca730ab , build time : Thu, 06 Mar 2025 04:48:22 UTC

rubygem-activesupport-7.1.3.4-1.ph4.x86_64.rpm | size : 940K , sha256 : e4f439596eb9dd16089f605cf611033e77bfb0c140bd528b78ac2c4a85427436 , build time : Thu, 06 Mar 2025 04:52:33 UTC