# Important Photon OS Security Update

## Summary
  
Advisory Id     : PHSA-2026-4.0-1052
  
Type            : Security
  
Severity        : ['Important', 'Moderate', 'Low']
  
Issue date      : 2026-07-08
  
Affected Release: 4.0

## Details
  
Updates of ['python3-lxml', 'rubygem-oj', 'python3-pyOpenSSL', 'rubygem-nokogiri', 'rubygem-concurrent-ruby'] packages of Photon OS have been released.
## Affected Packages

### Important
  
python3-lxml - ['[CVE-2026-41066](https://nvd.nist.gov/vuln/detail/CVE-2026-41066)']
  
rubygem-oj - ['[CVE-2026-54592](https://nvd.nist.gov/vuln/detail/CVE-2026-54592)']
  
rubygem-concurrent-ruby - ['[CVE-2026-54904](https://nvd.nist.gov/vuln/detail/CVE-2026-54904)']

### Moderate
  
rubygem-oj - ['[CVE-2026-54903](https://nvd.nist.gov/vuln/detail/CVE-2026-54903)', '[CVE-2026-54899](https://nvd.nist.gov/vuln/detail/CVE-2026-54899)', '[CVE-2026-54502](https://nvd.nist.gov/vuln/detail/CVE-2026-54502)', '[CVE-2026-54900](https://nvd.nist.gov/vuln/detail/CVE-2026-54900)', '[CVE-2026-54901](https://nvd.nist.gov/vuln/detail/CVE-2026-54901)', '[CVE-2026-54902](https://nvd.nist.gov/vuln/detail/CVE-2026-54902)', '[CVE-2026-54500](https://nvd.nist.gov/vuln/detail/CVE-2026-54500)']
  
python3-pyOpenSSL - ['[BDSA-2026-8479](https://nvd.nist.gov/vuln/detail/BDSA-2026-8479)']
  
rubygem-nokogiri - ['[CVE-2026-57436](https://nvd.nist.gov/vuln/detail/CVE-2026-57436)']
  
rubygem-concurrent-ruby - ['[CVE-2026-54905](https://nvd.nist.gov/vuln/detail/CVE-2026-54905)']

### Low
  
rubygem-oj - ['[CVE-2026-54898](https://nvd.nist.gov/vuln/detail/CVE-2026-54898)', '[CVE-2026-54896](https://nvd.nist.gov/vuln/detail/CVE-2026-54896)', '[CVE-2026-54897](https://nvd.nist.gov/vuln/detail/CVE-2026-54897)']

## Solution
  
Update the affected packages (tdnf update package)

## Updated Packages Information
  
python3-lxml-4.9.1-2.ph4.x86_64.rpm | size : 1.2M , sha256 : 838e77298111473f1f4370aa36ac0d0cd5af40a7e5b498a3f3afb23cef5d7046 , build time : Wed, 08 Jul 2026 08:18:08 UTC
  
rubygem-oj-3.17.3-1.ph4.x86_64.rpm | size : 960K , sha256 : 45794be2b50d9bc07d87fd3c37efdfaf3762bb7ab7a72b5d28fbe98eff7a11ed , build time : Wed, 08 Jul 2026 08:18:10 UTC
  
python3-pyOpenSSL-23.2.0-4.ph4.noarch.rpm | size : 96K , sha256 : a5780b07998b8399d3867c37d3277c1f0b6293cc159bf5fe522d6d0accb2284d , build time : Wed, 08 Jul 2026 08:18:07 UTC
  
rubygem-nokogiri-1.13.6-5.ph4.x86_64.rpm | size : 6.7M , sha256 : 3a61cc57a893337d72441eabba4e23ff21cf53a5e7f4ca611531e4e84fbd3a2f , build time : Wed, 08 Jul 2026 08:18:10 UTC
  
rubygem-concurrent-ruby-1.1.7-3.ph4.x86_64.rpm | size : 956K , sha256 : b46eda0a54a5e0e8c4f9a2960707989755e53d80e473c4272d6868d39ffb5aee , build time : Wed, 08 Jul 2026 08:18:10 UTC