Aggregator

Version:next-20260923 (linux-next) Released:2026-09-23

FEDORA-EPEL-2026-bc4e39e819 Packages in this update:

• openbao-2.6.3-1.el10_2

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-fcd0d6efe7 Packages in this update:

• openbao-2.6.3-1.el10_4

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-ea3b447e05 Packages in this update:

• openbao-2.6.3-1.fc45

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-4301c99549 Packages in this update:

• openbao-2.6.3-1.el9

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-498661c28b Packages in this update:

• openbao-2.6.3-1.el8

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-b4dd4dc37c Packages in this update:

• openbao-2.6.3-1.fc43

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-3688145aba Packages in this update:

• openbao-2.6.3-1.fc44

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-982c090cff Packages in this update:

• openbao-2.6.3-1.el10_3

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-84fde70eed Packages in this update:

• erlang-26.2.5.21-8.fc44

Update description:

Backported fixes for CVE-2026-65634, CVE-2026-68956, CVE-2026-89422

FEDORA-2026-d47f327121 Packages in this update:

• erlang-26.2.5.21-8.fc43

Update description:

Backported fixes for CVE-2026-65634, CVE-2026-68956, CVE-2026-89422

USN-8287-1 fixed a vulnerability in XDG Desktop Portal. Unfortunately the fix for CVE-2026-40354 was incomplete and introduced a regression when trashing files. This update fixes the problem and provides the corresponding update for Ubuntu 26.04 LTS. We apologize for the inconvenience. Original advisory details: It was discovered that XDG Desktop Portal incorrectly handled trashing files. A local attacker could possibly use this issue to delete arbitrary files on the host file system via a symlink attack.

Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using the SSH transport. A remote attacker could possibly use this issue to execute arbitrary commands.

It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string literals. An attacker could use this issue to cause SQL parse to consume excessive CPU resources, resulting in a denial of service.

FEDORA-2026-8604c8d63b Packages in this update:

• emacs-31.1-4.fc45

Update description:

Prevent arbitrary code execution in flymake.

It was discovered that Open-iSNS contained a double-free vulnerability when decoding malformed iSNS attributes. An unauthenticated attacker could possibly use this to cause a denial of service.

FEDORA-2026-0a7abaa716 Packages in this update:

• asterisk-23.5.0-5.fc45

Update description:

Fix for CVE-2026-84975

FEDORA-2026-9ff25022c1 Packages in this update:

• cockpit-368-1.fc43

Update description:

Automatic update for cockpit-368-1.fc43.

FEDORA-2026-61b2a3477a Packages in this update:

• cockpit-368-1.fc44

Update description:

Automatic update for cockpit-368-1.fc44.

Changelog for cockpit * Wed Sep 23 2026 Packit <hello@packit.dev> - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-ws against trailing slash CVE-2026-91147 - Sanitize URLs from PackageKit CVE-2026-91148 - Interactive file chooser for SSH keys - Bug fixes and translation updates - Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4 - Resolves RHEL-263066 for rhel-9.10

FEDORA-2026-d375ea9e79 Packages in this update:

• cockpit-368-1.fc45

Update description:

Automatic update for cockpit-368-1.fc45.

Changelog for cockpit * Wed Sep 23 2026 Packit <hello@packit.dev> - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-ws against trailing slash CVE-2026-91147 - Sanitize URLs from PackageKit CVE-2026-91148 - Interactive file chooser for SSH keys - Bug fixes and translation updates - Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4 - Resolves RHEL-263066 for rhel-9.10