Security Update 4.0 1052

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2026-4.0-1052

Type : Security

Severity : ['Important', 'Moderate', 'Low']

Issue date : 2026-07-08

Affected Release: 4.0

Details

Updates of ['rubygem-nokogiri', 'rubygem-concurrent-ruby', 'python3-pyOpenSSL', 'rubygem-oj', 'python3-lxml'] packages of Photon OS have been released.

Affected Packages

Important

rubygem-concurrent-ruby - ['CVE-2026-54904']

rubygem-oj - ['CVE-2026-54592']

python3-lxml - ['CVE-2026-41066']

Moderate

rubygem-nokogiri - ['CVE-2026-57436']

rubygem-concurrent-ruby - ['CVE-2026-54905']

python3-pyOpenSSL - ['BDSA-2026-8479']

rubygem-oj - ['CVE-2026-54900', 'CVE-2026-54902', 'CVE-2026-54899', 'CVE-2026-54903', 'CVE-2026-54502', 'CVE-2026-54500', 'CVE-2026-54901']

Low

rubygem-oj - ['CVE-2026-54898', 'CVE-2026-54896', 'CVE-2026-54897']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

rubygem-nokogiri-1.13.6-5.ph4.x86_64.rpm | size : 6.7M , sha256 : 3a61cc57a893337d72441eabba4e23ff21cf53a5e7f4ca611531e4e84fbd3a2f , build time : Wed, 08 Jul 2026 08:18:10 UTC

rubygem-concurrent-ruby-1.1.7-3.ph4.x86_64.rpm | size : 956K , sha256 : b46eda0a54a5e0e8c4f9a2960707989755e53d80e473c4272d6868d39ffb5aee , build time : Wed, 08 Jul 2026 08:18:10 UTC

python3-pyOpenSSL-23.2.0-4.ph4.noarch.rpm | size : 96K , sha256 : a5780b07998b8399d3867c37d3277c1f0b6293cc159bf5fe522d6d0accb2284d , build time : Wed, 08 Jul 2026 08:18:07 UTC

rubygem-oj-3.17.3-1.ph4.x86_64.rpm | size : 960K , sha256 : 45794be2b50d9bc07d87fd3c37efdfaf3762bb7ab7a72b5d28fbe98eff7a11ed , build time : Wed, 08 Jul 2026 08:18:10 UTC

python3-lxml-4.9.1-2.ph4.x86_64.rpm | size : 1.2M , sha256 : 838e77298111473f1f4370aa36ac0d0cd5af40a7e5b498a3f3afb23cef5d7046 , build time : Wed, 08 Jul 2026 08:18:08 UTC