# Critical Photon OS Security Update

## Summary
  
Advisory Id     : PHSA-2026-5.0-91-0755
  
Type            : Security
  
Severity        : ['Critical', 'Important', 'Moderate']
  
Issue date      : 2026-02-05
  
Affected Release: 5.0-91

## Details
  
Updates of ['alsa-lib', 'nodejs'] packages of Photon OS have been released.
## Affected Packages

### Critical
  
nodejs - ['[CVE-2025-55130](https://nvd.nist.gov/vuln/detail/CVE-2025-55130)']

### Important
  
alsa-lib - ['[CVE-2026-25068](https://nvd.nist.gov/vuln/detail/CVE-2026-25068)']
  
nodejs - ['[CVE-2025-59466](https://nvd.nist.gov/vuln/detail/CVE-2025-59466)', '[CVE-2025-59465](https://nvd.nist.gov/vuln/detail/CVE-2025-59465)', '[CVE-2026-21637](https://nvd.nist.gov/vuln/detail/CVE-2026-21637)', '[CVE-2025-55131](https://nvd.nist.gov/vuln/detail/CVE-2025-55131)']

### Moderate
  
nodejs - ['[CVE-2025-55132](https://nvd.nist.gov/vuln/detail/CVE-2025-55132)']

## Solution
  
Update the affected packages (tdnf update package)

## Updated Packages Information
  
alsa-lib-1.2.8-4.ph5.x86_64.rpm | size : 496K , sha256 : b561964ac8e4320e1d25ca9f2cfd2ef141f613b8dfbb46b7eb544a149e9f2765 , build time : Thu, 05 Feb 2026 12:50:59 UTC
  
alsa-lib-devel-1.2.8-4.ph5.x86_64.rpm | size : 84K , sha256 : 61fdd06dbffe9c8aea2a749b44f82a57addbdf05493c43a47bce3d6e091c980a , build time : Thu, 05 Feb 2026 12:50:59 UTC
  
nodejs-22.22.0-1.ph5.x86_64.rpm | size : 21M , sha256 : dd97b7c1db7ccf6bf9d8473937c3adfdb19f4699f52c99f7a64f4c7c898b1b95 , build time : Thu, 05 Feb 2026 12:51:11 UTC
  
nodejs-devel-22.22.0-1.ph5.x86_64.rpm | size : 252K , sha256 : a0eb3afaeb28894e17077613d6a2da19f819931409579a27953887200def115a , build time : Thu, 05 Feb 2026 12:51:11 UTC