Security Update 5.0 434

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2024-5.0-0434

Type : Security

Severity : ['Critical', 'Important', 'Moderate']

Issue date : 2024-12-31

Affected Release: 5.0

Details

Updates of ['python-jinja2', 'python-webob', 'python-werkzeug', 'python3-jinja2', 'python-requests', 'python-tornado', 'python3', 'python-virtualenv', 'python-gevent'] packages of Photon OS have been released.

Affected Packages

Critical

python-gevent - ['CVE-2023-41419']

Important

python-werkzeug - ['CVE-2024-34069']

python-tornado - ['CVE-2024-52804']

python3 - ['CVE-2024-9287']

python-virtualenv - ['CVE-2024-53899']

Moderate

python-jinja2 - ['CVE-2024-34064']

python-webob - ['CVE-2024-42353']

python3-jinja2 - ['CVE-2024-22195', 'CVE-2024-34064']

python-requests - ['CVE-2024-35195']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

python3-jinja2-3.1.2-5.ph5.noarch.rpm | size : 308K , sha256 : b9a9297a8ca039d47574b3185fc2e8be29d82969d02a397f24409942b0544188 , build time : Tue, 31 Dec 2024 17:49:41 UTC

python3-3.11.9-7.ph5.x86_64.rpm | size : 1.6M , sha256 : a32d5e1a3b0323cf1779591b60b5e1336cf878ed6921007354a5d4d7ba9a175e , build time : Tue, 31 Dec 2024 17:38:09 UTC

python3-curses-3.11.9-7.ph5.x86_64.rpm | size : 64K , sha256 : f9469789607c33beadd09df86b752f62733e00044bbe64b15aeaca89bd9dca32 , build time : Tue, 31 Dec 2024 17:38:09 UTC

python3-devel-3.11.9-7.ph5.x86_64.rpm | size : 216K , sha256 : 09a8b5d0bd282990dced2ed528fa7e96173c1af87fc5a58b5be597ce4c77a934 , build time : Tue, 31 Dec 2024 17:38:09 UTC

python3-gevent-23.9.1-1.ph5.x86_64.rpm | size : 1.9M , sha256 : cc77e09aed46ed93b97952a185769bc816094a3f9a9c6508a463f04a1f980586 , build time : Tue, 31 Dec 2024 17:50:05 UTC

python3-jinja2-3.1.2-5.ph5.noarch.rpm | size : 308K , sha256 : b9a9297a8ca039d47574b3185fc2e8be29d82969d02a397f24409942b0544188 , build time : Tue, 31 Dec 2024 17:49:41 UTC

python3-libs-3.11.9-7.ph5.x86_64.rpm | size : 29M , sha256 : d5455f23e27b77f9415be55921bbd977b3220e9dae465a4cd2b2fb1f415e0d9c , build time : Tue, 31 Dec 2024 17:38:09 UTC

python3-macros-3.11.9-7.ph5.noarch.rpm | size : 20K , sha256 : 9207439c746e23dafde3d894c094aff44beb35d4d17d1db365d923e794b393dc , build time : Tue, 31 Dec 2024 17:38:09 UTC

python3-requests-2.28.1-6.ph5.noarch.rpm | size : 132K , sha256 : 2ef758dcdd7790da3338bf6df74bccca4399e5c137d4d1387d462c2b686efa46 , build time : Tue, 31 Dec 2024 17:49:40 UTC

python3-test-3.11.9-7.ph5.x86_64.rpm | size : 3.4M , sha256 : 8383fbcd5d1a287490440aa3a68b0e17897e37397176ac5c9ec64955852a6a9c , build time : Tue, 31 Dec 2024 17:38:09 UTC

python3-tools-3.11.9-7.ph5.x86_64.rpm | size : 148K , sha256 : ad0e0afdbad011d3193f1bbc934bc5f2068a51014c3fd03cd2a4c808bce77290 , build time : Tue, 31 Dec 2024 17:38:09 UTC

python3-tornado-6.2-4.ph5.x86_64.rpm | size : 844K , sha256 : 00428e97d133d5d8d2fbfb2ca534e266a61359561a6e6403fa89e18114ddbb15 , build time : Tue, 31 Dec 2024 17:49:41 UTC

python3-virtualenv-20.16.3-5.ph5.noarch.rpm | size : 6.1M , sha256 : baf65d405b79ce2e402bb96e66e228c4b0ff563c0c04d7afd8d188a0f4f82920 , build time : Tue, 31 Dec 2024 17:49:42 UTC

python3-webob-1.8.7-3.ph5.noarch.rpm | size : 228K , sha256 : 52cc599e7fb5bfea8478c11a3625a617bfb1deadfa4b55f735259b42a9276b25 , build time : Tue, 31 Dec 2024 17:49:41 UTC

python3-werkzeug-2.2.2-3.ph5.noarch.rpm | size : 460K , sha256 : a9b7c9cbab5f2e5ab6774aeb2866277ede27390f977ffa7ca95ac0d35d4fe464 , build time : Tue, 31 Dec 2024 17:49:41 UTC

python3-xml-3.11.9-7.ph5.x86_64.rpm | size : 100K , sha256 : 535887eb8b2afbcef4f8be15738b7ac35772f6f4fdc7fa3b7d01a0cec605880a , build time : Tue, 31 Dec 2024 17:38:09 UTC