Linux distributions issue broad security updates for kernel, OpenSSH, curl, PHP
AlmaLinux, Debian, Fedora, Mageia, Oracle, Red Hat, SUSE and Ubuntu released security patches covering the kernel, OpenSSH, curl, PHP, Python, PostgreSQL, and numerous other packages on October 19-20, 2026.
Summary
Major Linux distributions issued coordinated security updates on October 19-20, 2026. Red Hat patched kernel and kernel-rt for Enterprise Linux 8 and 10, plus OpenSSH and PostgreSQL versions 16 and 18. Ubuntu addressed PHP across releases from 5.0 through 8.5, plus OpenSSH, curl, and cifs-utils. Fedora updated chromium, curl, python3.15, and multiple Rust packages. SUSE patched kubernetes, podman, and the nvidia-open-driver-G07-signed package.
Affected packages and distributions
- Kernel: Patched by AlmaLinux (ALSA-2026:83156), Red Hat (RHSA-2026:85321-01, RHSA-2026:85773-01), and Red Hat kernel-rt (RHSA-2026:85774-01)
- OpenSSH: Updates from Mageia, Red Hat (EL10), and Ubuntu (USN-8937-1, USN-8939-1)
- curl: Fedora (F43, F44) and Ubuntu (USN-8927-2, USN-8938-1) issued patches
- PHP: Ubuntu covered versions 5.0 through 8.5 across all supported releases (USN-8936-1)
- PostgreSQL: Red Hat updated versions 16 and 18 for Enterprise Linux 9
- Python: Fedora updated python3.15; SUSE patched python, python3, python315, and python36
- Browser engines: Mageia patched firefox and thunderbird; Fedora updated chromium; Oracle and AlmaLinux updated webkit2gtk3
- Container/tools: SUSE patched kubernetes, podman, and pi-coding-agent
Why it matters
The breadth of updates across all major enterprise and community distributions indicates a routine but substantial security maintenance cycle. Administrators running LTS releases should prioritize kernel, OpenSSH, and curl updates.
Original reference: lwn.net →