Aggregator

Version:7.2.4 (stable) Released:2026-09-07 Source:linux-7.2.4.tar.xz PGP Signature:linux-7.2.4.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.2.4

Version:6.18.50 (longterm) Released:2026-09-07 Source:linux-6.18.50.tar.xz PGP Signature:linux-6.18.50.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.50

Version:6.12.109 (longterm) Released:2026-09-07 Source:linux-6.12.109.tar.xz PGP Signature:linux-6.12.109.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.12.109

Version:next-20260907 (linux-next) Released:2026-09-07

FEDORA-2026-728dd9f704 Packages in this update:

• libevent-2.1.13-1.fc43

Update description: Update to 2.1.13.

The following security vulnerabilites are fixed in this update:

• GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/security/advisories/GHSA-fj29-64w6-73h6
• GHSA-45c6-qx49-89m8 CVE-2026-63384 https://github.com/libevent/libevent/security/advisories/GHSA-45c6-qx49-89m8
• GHSA-cvq5-vrvr-j338 CVE-2026-63388 https://github.com/libevent/libevent/security/advisories/GHSA-cvq5-vrvr-j338
• GHSA-58rx-7448-jw47 CVE-2026-63387 https://github.com/libevent/libevent/security/advisories/GHSA-58rx-7448-jw47
• GHSA-2gmv-p5m7-98p6 CVE-2026-63379 https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6
• GHSA-c2pj-cg4r-88c8 CVE-2026-63381 https://github.com/libevent/libevent/security/advisories/GHSA-c2pj-cg4r-88c8
• GHSA-q39v-w2g7-gr8j CVE-2026-63382 https://github.com/libevent/libevent/security/advisories/GHSA-q39v-w2g7-gr8j
• GHSA-jcwh-pvf2-73p2 CVE-2026-63385 https://github.com/libevent/libevent/security/advisories/GHSA-jcwh-pvf2-73p2

FEDORA-2026-63393c230f Packages in this update:

• erlang-26.2.5.21-6.fc44

Update description:

Fix for CVE-2026-55953

FEDORA-2026-e2b994d140 Packages in this update:

• erlang-26.2.5.21-6.fc43

Update description:

Fix for CVE-2026-55953

FEDORA-2026-72d10c874d Packages in this update:

• libevent-2.1.13-1.fc44

Update description: Update to 2.1.13.

The following security vulnerabilites are fixed in this update:

• GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/security/advisories/GHSA-fj29-64w6-73h6
• GHSA-45c6-qx49-89m8 CVE-2026-63384 https://github.com/libevent/libevent/security/advisories/GHSA-45c6-qx49-89m8
• GHSA-cvq5-vrvr-j338 CVE-2026-63388 https://github.com/libevent/libevent/security/advisories/GHSA-cvq5-vrvr-j338
• GHSA-58rx-7448-jw47 CVE-2026-63387 https://github.com/libevent/libevent/security/advisories/GHSA-58rx-7448-jw47
• GHSA-2gmv-p5m7-98p6 CVE-2026-63379 https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6
• GHSA-c2pj-cg4r-88c8 CVE-2026-63381 https://github.com/libevent/libevent/security/advisories/GHSA-c2pj-cg4r-88c8
• GHSA-q39v-w2g7-gr8j CVE-2026-63382 https://github.com/libevent/libevent/security/advisories/GHSA-q39v-w2g7-gr8j
• GHSA-jcwh-pvf2-73p2 CVE-2026-63385 https://github.com/libevent/libevent/security/advisories/GHSA-jcwh-pvf2-73p2

FEDORA-2026-0a83f1b852 Packages in this update:

• libevent-2.1.13-1.fc45

Update description: Update to 2.1.13.

The following security vulnerabilites are fixed in this update:

• GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/security/advisories/GHSA-fj29-64w6-73h6
• GHSA-45c6-qx49-89m8 CVE-2026-63384 https://github.com/libevent/libevent/security/advisories/GHSA-45c6-qx49-89m8
• GHSA-cvq5-vrvr-j338 CVE-2026-63388 https://github.com/libevent/libevent/security/advisories/GHSA-cvq5-vrvr-j338
• GHSA-58rx-7448-jw47 CVE-2026-63387 https://github.com/libevent/libevent/security/advisories/GHSA-58rx-7448-jw47
• GHSA-2gmv-p5m7-98p6 CVE-2026-63379 https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6
• GHSA-c2pj-cg4r-88c8 CVE-2026-63381 https://github.com/libevent/libevent/security/advisories/GHSA-c2pj-cg4r-88c8
• GHSA-q39v-w2g7-gr8j CVE-2026-63382 https://github.com/libevent/libevent/security/advisories/GHSA-q39v-w2g7-gr8j
• GHSA-jcwh-pvf2-73p2 CVE-2026-63385 https://github.com/libevent/libevent/security/advisories/GHSA-jcwh-pvf2-73p2

It was discovered that PHP incorrectly handled Apache map decoding in SOAP servers with a typemap configured. A remote attacker could use this issue to cause a NULL pointer dereference, resulting in a denial of service. (CVE-2026-7262) It was discovered that PHP incorrectly handled signed integer overflow in the metaphone() function. An attacker could use this issue to cause an out-of-bounds read, resulting in a denial of service. (CVE-2026-7568) It was discovered that PHP incorrectly handled circular symbolic links in phar archives. An attacker could use this issue to cause unbounded recursion, resulting in a denial of service. (CVE-2026-7260) It was discovered that PHP incorrectly escaped backslashes in the pgsql extension when standard_conforming_strings is enabled. An attacker could use this issue to perform SQL injection via a backslash breakout. (CVE-2026-17543)

FEDORA-2026-5812baee0f Packages in this update:

• freeipa-4.13.4-1.2.fc43

Update description:

FreeIPA 4.13.4 security release

Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html

FEDORA-2026-39b07f6dbb Packages in this update:

• gegl04-0.4.72-1.fc43

Update description:

This update contains a new upstream release with bugfixes and improvements, notably it fixes an overflow in parsing RGBE/HDR image files.

For more information, please consult the upstream changelog.

FEDORA-EPEL-2026-ffca0f924a Packages in this update:

• openvpn-2.7.7-1.el10_3

Update description:

Update to upstream 2.7.7 release

FEDORA-EPEL-2026-7f69be3a02 Packages in this update:

• openvpn-2.7.7-1.el10_4

Update description:

Update to upstream 2.7.7 release

FEDORA-2026-725faae162 Packages in this update:

• openvpn-2.7.7-1.fc44

Update description:

Update to upstream 2.7.7 release

FEDORA-2026-17203fb331 Packages in this update:

• openvpn-2.7.7-1.fc45

Update description:

Update to upstream 2.7.7 release

FEDORA-2026-5cce49502a Packages in this update:

• libcupsfilters-2.2.1-3.fc46

Update description:

Automatic update for libcupsfilters-2.2.1-3.fc46.

Changelog * Fri Sep 4 2026 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.1-3 - fix multiple copies not working for raster drivers (rhbz#2312145)

Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utility created temporary files in an insecure manner when mktemp was unavailable. A local attacker could possibly use this issue to overwrite arbitrary files. (CVE-2026-41991) Elias Hasas, Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip incorrectly handled certain compressed files. An attacker could possibly use this issue to obtain sensitive information or cause Gzip to crash, resulting in a denial of service. (CVE-2026-41992)

FEDORA-2026-1c8697a163 Packages in this update:

• freeipa-4.13.4-1.2.fc44

Update description:

FreeIPA 4.13.4 security release

Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html

FEDORA-2026-b314830fc3 Packages in this update:

• freeipa-4.13.4-1.2.fc45

Update description:

FreeIPA 4.13.4 security release

Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html