Advisory Id : PHSA-2026-4.0-0956

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2026-02-03

Affected Release: 4.0

Updates of ['expat', 'nodejs'] packages of Photon OS have been released.

nodejs - ['CVE-2025-55130']

nodejs - ['CVE-2025-59466', 'CVE-2026-21637', 'CVE-2025-59465', 'CVE-2025-55131']

nodejs - ['CVE-2025-55132']

expat - ['CVE-2026-24515']

Update the affected packages (tdnf update package)

expat-2.7.4-1.ph4.x86_64.rpm | size : 24K , sha256 : 3206a365c7841190ad62b4e2897a02322e66dc632c391ee7e189cf8bd8d8a0d4 , build time : Tue, 03 Feb 2026 19:04:09 UTC

expat-devel-2.7.4-1.ph4.x86_64.rpm | size : 28K , sha256 : 6fb5945d555ea8c0ecef6125d040dac70e92dfb90be6403dda6aa2f6b22b6a7d , build time : Tue, 03 Feb 2026 19:04:09 UTC

expat-docs-2.7.4-1.ph4.x86_64.rpm | size : 40K , sha256 : 58595151101e351450c9a2153dfc2d1c19c78371b89d950d47e4271c26fd0f26 , build time : Tue, 03 Feb 2026 19:04:09 UTC

expat-libs-2.7.4-1.ph4.x86_64.rpm | size : 84K , sha256 : 548ecc41b2106d6c8ce19b8b312db7de3528ea8891f992440583bc646c13ca3b , build time : Tue, 03 Feb 2026 19:04:09 UTC

nodejs-22.22.0-1.ph4.x86_64.rpm | size : 21M , sha256 : 17169cb1477c7318fe0a2ed5f38d8cde27a0356579e02069f61dbec0e518c1f2 , build time : Tue, 03 Feb 2026 19:04:35 UTC

nodejs-devel-22.22.0-1.ph4.x86_64.rpm | size : 252K , sha256 : 902b1569abcdc0eee66beac46258d644aa191967d24c9eb3ad5b4be33bda0664 , build time : Tue, 03 Feb 2026 19:04:35 UTC