# Linux distributions issue broad security updates for kernel, OpenSSH, curl, PHP

> **Key takeaway:** AlmaLinux, Debian, Fedora, Mageia, Oracle, Red Hat, SUSE and Ubuntu released security patches covering the kernel, OpenSSH, curl, PHP, Python, PostgreSQL, and numerous other packages on October 19-20, 2026.

**Published:** 2026-10-20T13:06:38+00:00 
**Source:** Linux Weekly News (LWN.net) 
**Category:** kernel-os 
**Canonical URL:** https://fosswire.org/news/linux-distributions-issue-broad-security-updates-for-kernel-.html 

## Summary
Major Linux distributions issued coordinated security updates on October 19-20, 2026. Red Hat patched kernel and kernel-rt for Enterprise Linux 8 and 10, plus OpenSSH and PostgreSQL versions 16 and 18. Ubuntu addressed PHP across releases from 5.0 through 8.5, plus OpenSSH, curl, and cifs-utils. Fedora updated chromium, curl, python3.15, and multiple Rust packages. SUSE patched kubernetes, podman, and the nvidia-open-driver-G07-signed package.

## Affected packages and distributions
- **Kernel**: Patched by AlmaLinux (ALSA-2026:83156), Red Hat (RHSA-2026:85321-01, RHSA-2026:85773-01), and Red Hat kernel-rt (RHSA-2026:85774-01)
- **OpenSSH**: Updates from Mageia, Red Hat (EL10), and Ubuntu (USN-8937-1, USN-8939-1)
- **curl**: Fedora (F43, F44) and Ubuntu (USN-8927-2, USN-8938-1) issued patches
- **PHP**: Ubuntu covered versions 5.0 through 8.5 across all supported releases (USN-8936-1)
- **PostgreSQL**: Red Hat updated versions 16 and 18 for Enterprise Linux 9
- **Python**: Fedora updated python3.15; SUSE patched python, python3, python315, and python36
- **Browser engines**: Mageia patched firefox and thunderbird; Fedora updated chromium; Oracle and AlmaLinux updated webkit2gtk3
- **Container/tools**: SUSE patched kubernetes, podman, and pi-coding-agent

## Why it matters
The breadth of updates across all major enterprise and community distributions indicates a routine but substantial security maintenance cycle. Administrators running LTS releases should prioritize kernel, OpenSSH, and curl updates.