Security Update 4.0 903

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2025-4.0-0903

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2025-11-10

Affected Release: 4.0

Details

Updates of ['polkit', 'curl', 'rubygem-yajl-ruby', 'lasso'] packages of Photon OS have been released.

Affected Packages

Critical

lasso - ['CVE-2025-47151']

Important

curl - ['CVE-2025-9086']

rubygem-yajl-ruby - ['CVE-2022-24795']

lasso - ['CVE-2025-46705', 'CVE-2025-46404', 'CVE-2025-46784']

Moderate

polkit - ['CVE-2025-7519']

curl - ['CVE-2025-5025', 'CVE-2025-4947', 'CVE-2025-10148']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

polkit-0.120-9.ph4.x86_64.rpm | size : 164K , sha256 : 45e817f69dbc64848c03485bbfebb751bff1699494ff0a1ae9d910caa1a32580 , build time : Mon, 10 Nov 2025 09:50:05 UTC

polkit-devel-0.120-9.ph4.x86_64.rpm | size : 76K , sha256 : 21f364238085cd4cf97d0364f264b6966b9c16545a292f3fb7ecc766673a373f , build time : Mon, 10 Nov 2025 09:50:05 UTC

curl-8.16.0-1.ph4.x86_64.rpm | size : 272K , sha256 : 6429f95b82e605cd3e9bb74ba5193cf4bbc59923041884591b16a2ecf76ea85b , build time : Mon, 10 Nov 2025 09:49:06 UTC

curl-devel-8.16.0-1.ph4.x86_64.rpm | size : 744K , sha256 : 371180058eb8462bce2fc18ae9f1d8618b7048abe57c0ac556116741bd78df43 , build time : Mon, 10 Nov 2025 09:49:06 UTC

curl-libs-8.16.0-1.ph4.x86_64.rpm | size : 376K , sha256 : fe975e74f7a42e75bfc6a45ec5c3b386e6bb77ff34064d884f7c3541356ddd70 , build time : Mon, 10 Nov 2025 09:49:06 UTC

rubygem-yajl-ruby-1.4.3-1.ph4.x86_64.rpm | size : 1.1M , sha256 : fa67697409eb54c4cc25bb7fd22be619988b86116506e744f3043db600b89982 , build time : Mon, 10 Nov 2025 09:49:07 UTC

lasso-2.9.0-1.ph4.x86_64.rpm | size : 216K , sha256 : fc3790f142300a893471c09af2e68fe273d262e8cd08e7d0659262e014eec7a9 , build time : Mon, 10 Nov 2025 09:49:07 UTC

lasso-devel-2.9.0-1.ph4.x86_64.rpm | size : 96K , sha256 : 06e0b64f6a72a3cfa2c01fe9ace115977cac2deecbf2f9234ba007cf5476dc85 , build time : Mon, 10 Nov 2025 09:49:07 UTC