Aggregator

Version:next-20260914 (linux-next) Released:2026-09-14

FEDORA-2026-febfd10293 Packages in this update:

• freeipmi-1.6.19-1.fc44

Update description:

Updates to 1.6.19, also fixes CVE-2026-33554 CVE-2026-50031 CVE-2026-85504 CVE-2026-85505 CVE-2026-85506 CVE-2026-85507 CVE-2026-85508 CVE-2026-85509, and adds tmpfiles configs for image mode

FEDORA-2026-bc7408de42 Packages in this update:

• postgresql16-anonymizer-3.2.2-1.fc45

Update description:

Upstream changelog: https://gitlab.com/dalibo/postgresql_anonymizer/-/releases

• [core] CVE-2026-19633: Escalation via custom types, operators and rangevars
• [core] update dependencies
• [static] Define masking policy with parallel static masking
• [pseudo] Add seeded_street_name
• [static] CVE-2026-83534: Elevation in parallel masking
• [make] call extension+install before regress
• [pseudo] new panel of seeded_* functions
• [impexp] CVE-2026-19634: SQL injection via import functions
• [partial] Add anon.array_remove_regex()
• [static] Ignore a TABLESAMPLE sampling ratio on non-plain-table relations
• [parallel] Reject a materialized view before parallel masking
• [dynamic] Proper error message on write operations
• [static] Optionally drop indexes during static masking (beta)
• [doc] update the permission matrix
• [tests] Gate the impexp unit tests on cfg(test) only
• [doc] split Load and Support out of the Install page
• [docker] make the image ready for replica masking
• [tests] Introduce cargo pgrx regress
• [core] Upgrade dependencies
• [core] Remove useless compatibility function
• [image] Define a default value for the sigma parameter
• [doc] Add the "Anonymized Replica" tutorial
• [docker] disable fsync during initdb
• [static] Improve performance and correctness for parallel masking
• [doc] how to fix cargo audit warnings
• [doc] Install on Fedora
• [core] Support PostgreSQL 19 (beta)
• [core] Upgrade to PGRX 0.19

FEDORA-2026-58a319c686 Packages in this update:

• postgresql16-anonymizer-3.2.2-1.fc44

Update description:

Upstream changelog: https://gitlab.com/dalibo/postgresql_anonymizer/-/releases

• [core] CVE-2026-19633: Escalation via custom types, operators and rangevars
• [core] update dependencies
• [static] Define masking policy with parallel static masking
• [pseudo] Add seeded_street_name
• [static] CVE-2026-83534: Elevation in parallel masking
• [make] call extension+install before regress
• [pseudo] new panel of seeded_* functions
• [impexp] CVE-2026-19634: SQL injection via import functions
• [partial] Add anon.array_remove_regex()
• [static] Ignore a TABLESAMPLE sampling ratio on non-plain-table relations
• [parallel] Reject a materialized view before parallel masking
• [dynamic] Proper error message on write operations
• [static] Optionally drop indexes during static masking (beta)
• [doc] update the permission matrix
• [tests] Gate the impexp unit tests on cfg(test) only
• [doc] split Load and Support out of the Install page
• [docker] make the image ready for replica masking
• [tests] Introduce cargo pgrx regress
• [core] Upgrade dependencies
• [core] Remove useless compatibility function
• [image] Define a default value for the sigma parameter
• [doc] Add the "Anonymized Replica" tutorial
• [docker] disable fsync during initdb
• [static] Improve performance and correctness for parallel masking
• [doc] how to fix cargo audit warnings
• [doc] Install on Fedora
• [core] Support PostgreSQL 19 (beta)
• [core] Upgrade to PGRX 0.19

Version:7.2.6 (stable) Released:2026-09-14 Source:linux-7.2.6.tar.xz PGP Signature:linux-7.2.6.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.2.6

Version:6.18.52 (longterm) Released:2026-09-14 Source:linux-6.18.52.tar.xz PGP Signature:linux-6.18.52.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.52

USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly handled certain map directives using regex matching and capture variables. A remote attacker could use this issue to cause nginx to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-42533) It was discovered that nginx had a use-after-free vulnerability in the ngx_http_ssi_module module when configured with Server-Side Includes, proxy_pass, and proxy buffering disabled directives. An attacker able to intercept traffic and control responses from an upstream server could possibly use this issue to cause nginx to crash, resulting in a denial of service. (CVE-2026-56434) It was discovered that nginx incorrectly handled certain requests in the ngx_http_slice_module module. A remote attacker could possibly use this issue to obtain sensitive information or cause nginx to crash, resulting in a denial of service. (CVE-2026-60005)

Version:6.12.110 (longterm) Released:2026-09-14 Source:linux-6.12.110.tar.xz PGP Signature:linux-6.12.110.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.12.110

Version:6.6.157 (longterm) Released:2026-09-14 Source:linux-6.6.157.tar.xz PGP Signature:linux-6.6.157.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.6.157

Version:6.1.188 (longterm) Released:2026-09-14 Source:linux-6.1.188.tar.xz PGP Signature:linux-6.1.188.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.1.188

Version:5.15.221 (longterm) Released:2026-09-14 Source:linux-5.15.221.tar.xz PGP Signature:linux-5.15.221.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.15.221

Version:5.10.270 (longterm) Released:2026-09-14 Source:linux-5.10.270.tar.xz PGP Signature:linux-5.10.270.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.10.270

FEDORA-2026-abe39f1809 Packages in this update:

• freeipmi-1.6.19-1.fc45

Update description:

Updates to 1.6.19, also fixes CVE-2026-33554 CVE-2026-50031 CVE-2026-85504 CVE-2026-85505 CVE-2026-85506 CVE-2026-85507 CVE-2026-85508 CVE-2026-85509, and adds tmpfiles configs for image mode

FEDORA-EPEL-2026-0f5b361fa5 Packages in this update:

• perl-Net-DNS-1.57-1.el10_4

Update description:

Update to 1.57 to fix CVE-2026-81928 (Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records)

FEDORA-EPEL-2026-8a37d4d02f Packages in this update:

• perl-Net-DNS-1.57-1.el10_3

Update description:

Update to 1.57 to fix CVE-2026-81928 (Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records)

FEDORA-2026-57f107ed83 Packages in this update:

• perl-Net-DNS-1.57-1.fc44

Update description:

Update to 1.57 to fix CVE-2026-81928 (Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records)

FEDORA-2026-48a4531e02 Packages in this update:

• perl-Net-DNS-1.57-1.fc43

Update description:

Update to 1.57 to fix CVE-2026-81928 (Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records)

FEDORA-2026-5debc0de2b Packages in this update:

• evolution-3.62.0-1.fc45
• evolution-data-server-3.62.0-1.fc45
• evolution-ews-3.62.0-1.fc45

Update description:

Update to 3.62.0

evolution-data-server

Bug Fixes:

• I#660 - GOA EWS: Do not require OABUrl in autodiscover
• I#662 - EBackend: Document how OAuth2 sources should ask to be authenticated (Tobias Mueller)
• I#665 - CalDAV: Ignore Bad Request (400) on overwrite
• M!243 - ESourceRegistry: Name the credentials source in failed-lookup debug message (Tobias Mueller)

Translations:

• Alan Mortensen (da)
• Aurimas Černius (lt)
• Balázs Úr (hu)
• Baurzhan Muftakhidinov (kk)
• Emin Tufan Çetin (tr)
• Juliano de Souza Camargo (pt_BR)
• Kjartan Maraas (nb)

evolution

Bug Fixes:

• I#3381 - Composer: De-duplicate inline images before send
• I#3383 - junk-filters: Do not leak the child stdin pipe into concurrent spawns (Benjamin Herrenschmidt)
• I#3386 - Default to not use read-only calendars for reminders and conflict search
• I#3387 - EUIParser: Notify about accelerators moved by an action rename (Martin Monperrus (AI-assisted))
• I#3388 - Mail: Validate clickable preview elements are generated by Evolution
• M!235 - Mail: Remove deprecated SHA1 signature algorithm (Robin Haberkorn)

Miscellaneous:

• docs: Add API index for newly added symbols in 3.62 for e-util

Translations:

• Alan Mortensen (da)
• Aurimas Černius (lt)
• Balázs Úr (hu)
• Baurzhan Muftakhidinov (kk)
• burns (pt_BR)
• Emin Tufan Çetin (tr)
• Guillaume Bernard (fr)
• Jiri Eischmann (cs)
• Kjartan Maraas (nb)

evolution-ews

Bug Fixes:

• M!18 - Add a per-folder coalescing gate for sync and refresh (Benjamin Herrenschmidt)
• M!19 - camel: Do not save the folder summary in the subclass dispose (David Woodhouse)

Translations:

• Alan Mortensen (da)
• Balázs Úr (hu)
• Jiri Eischmann (cs)
• Kjartan Maraas (nb)

FEDORA-2026-97a7ec5786 Packages in this update:

• cyrus-imapd-3.10.4-1.fc43

Update description:

• New version 3.10.4 (rhbz#2500822)

FEDORA-2026-740bc1c6fa Packages in this update:

• cyrus-imapd-3.12.4-1.fc44

Update description:

• New version 3.12.4 (rhbz#2500822)