Security Update 4.0 1038

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2026-4.0-1038

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2026-06-19

Affected Release: 4.0

Details

Updates of ['redis', 'coredns', 'erlang', 'python3-pip', 'rsync'] packages of Photon OS have been released.

Affected Packages

Critical

coredns - ['CVE-2026-35579']

Important

redis - ['CVE-2026-23479', 'CVE-2026-25243', 'CVE-2026-23631']

coredns - ['CVE-2026-33190', 'CVE-2026-32934', 'CVE-2026-33489', 'CVE-2025-68151', 'CVE-2026-32936']

erlang - ['CVE-2026-42790', 'CVE-2026-49759']

rsync - ['CVE-2026-43618', 'CVE-2026-29518']

Moderate

coredns - ['CVE-2026-26017']

erlang - ['CVE-2026-42789', 'CVE-2026-48860', 'CVE-2026-48856', 'CVE-2026-48855', 'CVE-2026-49760', 'CVE-2026-48858', 'CVE-2026-32147']

python3-pip - ['CVE-2024-37891']

Low

erlang - ['CVE-2026-42791']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

redis-7.2.14-1.ph4.x86_64.rpm | size : 1.8M , sha256 : ff24302221f1845418747076790ed9369b5bd0d504210c61aa5712229d746979 , build time : Fri, 19 Jun 2026 14:50:48 UTC

coredns-1.14.3-1.ph4.x86_64.rpm | size : 16M , sha256 : 51f507c767f4b7c54b9f2b52beaaa858ca4e16f6e6da9b6a959459222f19ad4f , build time : Fri, 19 Jun 2026 14:50:50 UTC

erlang-27.3.4.13-1.ph4.x86_64.rpm | size : 43M , sha256 : 960f838095e5fc67997651a92052f99b15165f6fa27de2376ed051dc5146904e , build time : Fri, 19 Jun 2026 14:50:46 UTC

python3-pip-23.3.2-7.ph4.noarch.rpm | size : 2.4M , sha256 : ef04c8c9cb635831ff91205900438ee19b118494e3c468fd3018268044c5f9e6 , build time : Fri, 19 Jun 2026 14:50:48 UTC

python3-pip-wheel-23.3.2-7.ph4.noarch.rpm | size : 2.0M , sha256 : e5cd0b7341acf2f4f22790ca8946226eb4af86e82f42b521a55779cf9ed25ffe , build time : Fri, 19 Jun 2026 14:50:48 UTC

rsync-3.4.4-1.ph4.x86_64.rpm | size : 344K , sha256 : c5512fa0c02562a625084798359aacfa656b0ab0ae450e85290a44f77254080f , build time : Fri, 19 Jun 2026 14:50:48 UTC