Aggregator

FEDORA-2026-9949becb18 Packages in this update:

• asterisk-23.5.0-4.fc45

Update description:

Disable outdated functionality which requires outdated SDL1.

Fix for CVE-2026-57160

FEDORA-EPEL-2026-9f73888869 Packages in this update:

• opkssh-0.16.0-3.el10_3

Update description:

Update the bundled golang.org/x/crypto to v0.56.0, which fixes CVE-2026-56855 and CVE-2026-78662 (denial of service via crafted channel messages in golang.org/x/crypto/ssh's connection multiplexer).

opkssh only uses golang.org/x/crypto/ssh for key and certificate handling and never establishes SSH connections through it, so the vulnerable code is not reachable in any opkssh build (confirmed with govulncheck).

FEDORA-EPEL-2026-878ec4ee25 Packages in this update:

• opkssh-0.16.0-3.el10_2

Update description:

Update the bundled golang.org/x/crypto to v0.56.0, which fixes CVE-2026-56855 and CVE-2026-78662 (denial of service via crafted channel messages in golang.org/x/crypto/ssh's connection multiplexer).

opkssh only uses golang.org/x/crypto/ssh for key and certificate handling and never establishes SSH connections through it, so the vulnerable code is not reachable in any opkssh build (confirmed with govulncheck).

FEDORA-2026-559bbb39f5 Packages in this update:

• opkssh-0.16.0-3.fc45

Update description:

Update the bundled golang.org/x/crypto to v0.56.0, which fixes CVE-2026-56855 and CVE-2026-78662 (denial of service via crafted channel messages in golang.org/x/crypto/ssh's connection multiplexer).

opkssh only uses golang.org/x/crypto/ssh for key and certificate handling and never establishes SSH connections through it, so the vulnerable code is not reachable in any opkssh build (confirmed with govulncheck).

FEDORA-2026-f7b73f165d Packages in this update:

• opkssh-0.16.0-3.fc44

Update description:

Update the bundled golang.org/x/crypto to v0.56.0, which fixes CVE-2026-56855 and CVE-2026-78662 (denial of service via crafted channel messages in golang.org/x/crypto/ssh's connection multiplexer).

opkssh only uses golang.org/x/crypto/ssh for key and certificate handling and never establishes SSH connections through it, so the vulnerable code is not reachable in any opkssh build (confirmed with govulncheck).

FEDORA-2026-38b019a0f0 Packages in this update:

• opkssh-0.16.0-3.fc43

Update description:

Update the bundled golang.org/x/crypto to v0.56.0, which fixes CVE-2026-56855 and CVE-2026-78662 (denial of service via crafted channel messages in golang.org/x/crypto/ssh's connection multiplexer).

opkssh only uses golang.org/x/crypto/ssh for key and certificate handling and never establishes SSH connections through it, so the vulnerable code is not reachable in any opkssh build (confirmed with govulncheck).

FEDORA-2026-95d69295a4 Packages in this update:

• PackageKit-1.4.0-1.fc45

Update description:

Update to 1.4.0 to fix CVE-2026-19816, GHSA-pwvr-2q5v-xvw4, GHSA-6759-8c43-4xrv, GHSA-6695-qjj5-533m, GHSA-gmhf-fxfx-m2w9

FEDORA-2026-6cf9691266 Packages in this update:

• PackageKit-1.4.0-1.fc44

Update description:

Update to 1.4.0 to fix CVE-2026-19816, GHSA-pwvr-2q5v-xvw4, GHSA-6759-8c43-4xrv, GHSA-6695-qjj5-533m, GHSA-gmhf-fxfx-m2w9

FEDORA-EPEL-2026-2d0edad09d Packages in this update:

• syncthing-2.1.3-1.el10_2

Update description:

Update to version 2.1.3.

FEDORA-EPEL-2026-f75fb5d146 Packages in this update:

• syncthing-2.1.3-1.el10_4

Update description:

Update to version 2.1.3.

FEDORA-EPEL-2026-9f4c039db2 Packages in this update:

• syncthing-2.1.3-1.el10_3

Update description:

Update to version 2.1.3.

FEDORA-2026-9ce2715225 Packages in this update:

• kernel-7.2.5-200.fc44

Update description:

The 7.2.5 stable kernel update contains a number of important fixes across the tree.

FEDORA-2026-bfc7ad7bad Packages in this update:

• kernel-7.2.5-300.fc45

Update description:

The 7.2.5 stable kernel update contains a number of important fixes across the tree.

FEDORA-2026-0a8e95dad5 Packages in this update:

• kernel-7.2.5-100.fc43

Update description:

The 7.2.5 stable kernel update contains a number of important fixes across the tree.

FEDORA-2026-9f63ee951e Packages in this update:

• asterisk-23.5.0-3.fc45

Update description:

Fix for CVE-2026-57160

FEDORA-2026-572a0f4178 Packages in this update:

• gegl04-0.4.72-3.fc43
• gimp-3.2.6-1.fc43

Update description:

This update contains new upstream releases containing bugfixes and improvements. Notably, it fixes an overflow in parsing RGBE/HDR image files.

For more information, please consult the GIMP 3.2.6 release announcement and the more detailed changelogs of gimp and gegl04.

Version:next-20260911 (linux-next) Released:2026-09-11

Version:7.2.5 (stable) Released:2026-09-11 Source:linux-7.2.5.tar.xz PGP Signature:linux-7.2.5.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.2.5

Version:6.18.51 (longterm) Released:2026-09-11 Source:linux-6.18.51.tar.xz PGP Signature:linux-6.18.51.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.51