Security Update 4.0 730

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2025-4.0-0730

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2025-01-07

Affected Release: 4.0

Details

Updates of ['python-gevent', 'python-tornado', 'python-werkzeug', 'python3-webob', 'python3-tornado', 'python3-werkzeug', 'python-jinja2', 'python-virtualenv', 'python3-gevent', 'python-requests', 'python-webob'] packages of Photon OS have been released.

Affected Packages

Critical

python-gevent - ['CVE-2023-41419']

python3-gevent - ['CVE-2023-41419']

Important

python-tornado - ['CVE-2024-52804']

python-werkzeug - ['CVE-2024-34069']

python3-tornado - ['CVE-2024-52804']

python3-werkzeug - ['CVE-2024-34069']

python-virtualenv - ['CVE-2024-53899']

Moderate

python3-webob - ['CVE-2024-42353']

python-jinja2 - ['CVE-2024-34064']

python-requests - ['CVE-2024-35195']

python-webob - ['CVE-2024-42353']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

python3-webob-1.8.6-3.ph4.noarch.rpm | size : 176K , sha256 : ea38e891054fe7451f4af3d9ba30c785a3bd978c766da459d25a2afc58407ccf , build time : Tue, 07 Jan 2025 14:55:42 UTC

python3-tornado-6.0.4-4.ph4.x86_64.rpm | size : 636K , sha256 : ed8d4b499012222696a55e05ede08d27075060e92e95815e6852c96c30047573 , build time : Tue, 07 Jan 2025 14:55:41 UTC

python3-werkzeug-2.2.2-1.ph4.noarch.rpm | size : 356K , sha256 : c1b7f6f7212bc0d214b540e4b3881884dd4ef8c9e21c94f20c1536ebb26629ad , build time : Tue, 07 Jan 2025 14:55:42 UTC

python3-gevent-21.8.0-3.ph4.x86_64.rpm | size : 1.7M , sha256 : 880c299d6f7c201267f476aeecd575a258ec038be09e0e9b289730f684433652 , build time : Tue, 07 Jan 2025 14:56:01 UTC