Security Update 4.0 995

Important Photon OS Security Update

Summary

Advisory Id : PHSA-2026-4.0-0995

Type : Security

Severity : ['Important', 'Moderate', 'Low']

Issue date : 2026-04-10

Affected Release: 4.0

Details

Updates of ['python3-pyasn1', 'python3-PyJWT', 'rubygem-activesupport', 'nodejs', 'libtiff', 'rubygem-rdiscount'] packages of Photon OS have been released.

Affected Packages

Important

python3-pyasn1 - ['CVE-2026-30922']

python3-PyJWT - ['CVE-2026-32597']

rubygem-activesupport - ['CVE-2026-33176']

nodejs - ['CVE-2026-21710', 'CVE-2026-21714']

libtiff - ['CVE-2026-4775']

Moderate

rubygem-activesupport - ['CVE-2026-33169', 'CVE-2026-33170']

nodejs - ['CVE-2026-21717', 'CVE-2026-21715', 'CVE-2026-21713']

libtiff - ['CVE-2025-61145', 'CVE-2025-61143']

rubygem-rdiscount - ['CVE-2026-35201']

Low

nodejs - ['CVE-2024-36137', 'CVE-2026-21716']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

python3-pyasn1-0.4.8-3.ph4.noarch.rpm | size : 128K , sha256 : 1814c5b528ef860eefa83c13daa0fddbfdd58f02f964c2beb777089c9a5e40c6 , build time : Fri, 10 Apr 2026 09:51:39 UTC

python3-PyJWT-2.8.0-2.ph4.noarch.rpm | size : 52K , sha256 : ced4403f0291e7ec3436dd95e6be2c36536066d14fb9a803ad5f8a6b72e9ed4e , build time : Fri, 10 Apr 2026 09:51:39 UTC

rubygem-activesupport-7.1.3.4-2.ph4.x86_64.rpm | size : 940K , sha256 : ddcae2627ccb174c74a70218a9f9fced59d62ccfa7041ba82c3fad0dcdbdc925 , build time : Fri, 10 Apr 2026 09:51:42 UTC

nodejs-22.22.2-1.ph4.x86_64.rpm | size : 21M , sha256 : eaa50b69ec031ef9249aa1ef5e450b3cdc49c8b0b83b99d37bbd54a1c544df20 , build time : Fri, 10 Apr 2026 09:51:40 UTC

nodejs-devel-22.22.2-1.ph4.x86_64.rpm | size : 252K , sha256 : be5883e7a8948fdb9174b6b08b253a05d87d9ddcbabf82b01aa2178b77f80b53 , build time : Fri, 10 Apr 2026 09:51:40 UTC

libtiff-4.5.1-12.ph4.x86_64.rpm | size : 380K , sha256 : e64d8d24dbe815498743b62cec4784d7dd37e48936ae9300a5ccc41aeb84192e , build time : Fri, 10 Apr 2026 09:51:38 UTC

libtiff-devel-4.5.1-12.ph4.x86_64.rpm | size : 856K , sha256 : d8aa456a88f2b08945bf3198e4584d825a037f85e9b03c5f831101d2cf13607c , build time : Fri, 10 Apr 2026 09:51:38 UTC

rubygem-rdiscount-2.2.0.2-4.ph4.x86_64.rpm | size : 212K , sha256 : d56f16f3d470c5fcbefbcf43cd7d9ec95904e42851076b5c00f9e5aaf6a1a11a , build time : Fri, 10 Apr 2026 09:51:42 UTC