Security Update 5.0 842

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2026-5.0-0842

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2026-05-07

Affected Release: 5.0

Details

Updates of ['dotnet-runtime', 'linux-esx', 'mysql'] packages of Photon OS have been released.

Affected Packages

Critical

dotnet-runtime - ['CVE-2026-32178']

linux-esx - ['CVE-2026-31659', 'CVE-2026-31657', 'CVE-2026-31649', 'CVE-2026-31478', 'CVE-2026-31669', 'CVE-2026-31668']

Important

dotnet-runtime - ['CVE-2026-33116', 'CVE-2026-32203', 'CVE-2026-26171']

linux-esx - ['CVE-2026-31477', 'CVE-2026-31422', 'CVE-2026-31454', 'CVE-2026-31508', 'CVE-2026-31424', 'CVE-2026-31426', 'CVE-2026-31469', 'CVE-2026-31570', 'CVE-2026-31507', 'CVE-2026-31446', 'CVE-2026-31485', 'CVE-2026-31566', 'CVE-2026-31433', 'CVE-2026-31425', 'CVE-2026-31453', 'CVE-2026-31662', 'CVE-2026-31494', 'CVE-2026-31421', 'CVE-2026-31563', 'CVE-2026-31667', 'CVE-2026-31656', 'CVE-2026-31665', 'CVE-2026-31533', 'CVE-2026-31504', 'CVE-2026-31417', 'CVE-2026-31473', 'CVE-2026-31476']

Moderate

dotnet-runtime - ['CVE-2025-55248']

linux-esx - ['CVE-2026-23409', 'CVE-2026-31480', 'CVE-2026-31510', 'CVE-2026-31414', 'CVE-2026-31434', 'CVE-2026-31467', 'CVE-2026-31498', 'CVE-2026-31670', 'CVE-2026-31679', 'CVE-2025-37980', 'CVE-2026-31509', 'CVE-2026-23414', 'CVE-2026-31651', 'CVE-2026-23405', 'CVE-2026-31464', 'CVE-2025-40242', 'CVE-2026-31565', 'CVE-2026-31515', 'CVE-2025-37945', 'CVE-2026-23406', 'CVE-2026-31448', 'CVE-2026-31450', 'CVE-2026-31521', 'CVE-2026-31441', 'CVE-2026-31458', 'CVE-2026-31418', 'CVE-2026-31671', 'CVE-2026-23269', 'CVE-2026-31658', 'CVE-2026-31466', 'CVE-2026-31428', 'CVE-2026-31672', 'CVE-2026-31674', 'CVE-2026-31503', 'CVE-2026-31682', 'CVE-2026-31455', 'CVE-2026-31492', 'CVE-2026-31689', 'CVE-2026-31520', 'CVE-2026-31427', 'CVE-2026-31497', 'CVE-2026-31519', 'CVE-2026-31523', 'CVE-2025-38436', 'CVE-2026-31423', 'CVE-2026-31664', 'CVE-2026-31483', 'CVE-2026-31555', 'CVE-2026-23360', 'CVE-2026-31661', 'CVE-2026-31518', 'CVE-2026-31678', 'CVE-2026-31524', 'CVE-2026-31522', 'CVE-2025-40016', 'CVE-2026-31495', 'CVE-2026-31680', 'CVE-2026-31512', 'CVE-2025-71269', 'CVE-2026-31634', 'CVE-2026-31660', 'CVE-2026-31496', 'CVE-2026-31452', 'CVE-2024-47736', 'CVE-2026-23403', 'CVE-2026-23404', 'CVE-2026-31415', 'CVE-2026-23401']

mysql - ['CVE-2026-22015', 'CVE-2026-34308', 'CVE-2026-22004', 'CVE-2026-22002', 'CVE-2026-22005', 'CVE-2026-35240', 'CVE-2026-34271', 'CVE-2026-35237', 'CVE-2026-35238', 'CVE-2026-35236', 'CVE-2026-35239', 'CVE-2026-22017', 'CVE-2026-22009', 'CVE-2026-34270', 'CVE-2026-34276', 'CVE-2026-34303', 'CVE-2026-21998', 'CVE-2026-34304']

Low

linux-esx - ['CVE-2026-31416', 'CVE-2026-31447']

mysql - ['CVE-2026-22001']

Solution

Update the affected packages (tdnf update package)

Note: For packages ['linux-esx'] after updating, a reboot is required for taking effect.

Updated Packages Information

dotnet-runtime-8.0.26-1.ph5.x86_64.rpm | size : 25M , sha256 : ce5d57b089e829f5099d516fd26b1d90db8e144815c39384528ffa2756035f4f , build time : Wed, 06 May 2026 21:28:03 UTC

linux-esx-6.12.78-4.ph5.x86_64.rpm | size : 19M , sha256 : 2d2cd8455ae4146d49c5f686d985de17b18f17b5337000d2b250377a55612a20 , build time : Wed, 06 May 2026 22:29:31 UTC

linux-esx-devel-6.12.78-4.ph5.x86_64.rpm | size : 13M , sha256 : 9c6aa2d94ad410fb4e3b6372a21f42a1b1d58117a4e4f94275b7fcdeeee1db10 , build time : Wed, 06 May 2026 22:29:31 UTC

linux-esx-docs-6.12.78-4.ph5.x86_64.rpm | size : 11M , sha256 : 893f6729183197659ca77eab8305efe670e3762b4103271c43b2617aee9d73da , build time : Wed, 06 May 2026 22:29:31 UTC

linux-esx-drivers-intel-i40e-2.28.10-1.0612078004.ph5.x86_64.rpm | size : 228K , sha256 : ad27228c3e676f37ab5385ea1971897ef6b68c978f1c41d5e1cb35475114d8b4 , build time : Wed, 06 May 2026 23:05:51 UTC

linux-esx-drivers-intel-i40e-docs-2.28.10-1.0612078004.ph5.x86_64.rpm | size : 40K , sha256 : d848619f687ac6075e699972e791385a413fb879a496c81324f732de699220d3 , build time : Wed, 06 May 2026 23:05:51 UTC

linux-esx-drivers-intel-iavf-4.13.16-1.0612078004.ph5.x86_64.rpm | size : 104K , sha256 : 29d1e7dad3e6f62dcf4b9b93d2e3197899f15497c1780bbe218d7c7c28ed72a6 , build time : Wed, 06 May 2026 23:05:57 UTC

linux-esx-drivers-intel-iavf-docs-4.13.16-1.0612078004.ph5.x86_64.rpm | size : 20K , sha256 : 52ba6ed5b765892b8dce0d85ce4f2a4aee22849ea7665d7f1b3c4968016a606a , build time : Wed, 06 May 2026 23:05:57 UTC

linux-esx-drivers-intel-ice-2.3.10-1.0612078004.ph5.x86_64.rpm | size : 476K , sha256 : 6a84c6bc854c09186388030d524ee00433c58375685cc451be2cb5fa650eb851 , build time : Wed, 06 May 2026 23:05:45 UTC

linux-esx-drivers-intel-ice-docs-2.3.10-1.0612078004.ph5.x86_64.rpm | size : 52K , sha256 : a70c2f3d0f89f22754438d7095362209a6115998759b2bae6ba91cba32b1a242 , build time : Wed, 06 May 2026 23:05:45 UTC

mysql-8.4.9-1.ph5.x86_64.rpm | size : 30M , sha256 : c66bc08640d923b45ce2c8ec62abbee034e19a678dc063a51184458971df3194 , build time : Wed, 06 May 2026 21:28:06 UTC

mysql-devel-8.4.9-1.ph5.x86_64.rpm | size : 96K , sha256 : acee398b330e228f8c8afff161e4b44a1aa0d08727e63c9dc28d7740180c4ca6 , build time : Wed, 06 May 2026 21:28:06 UTC

mysql-icu-data-files-8.4.9-1.ph5.x86_64.rpm | size : 12K , sha256 : d6bc6360f88459bc5643e0f7e4141723ac1bcdd59fe1adcd5a7a79dc8792f7a3 , build time : Wed, 06 May 2026 21:28:06 UTC