Linux · Fedora · Security advisory · April 11, 2026

FEDORA-2026-80B21DEBE7: Security update for 69 packages

FEDORA-2026-80B21DEBE7, released April 11, 2026, fixes 15 CVEs across 69 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
15
3 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.4529
98th percentile

Priority of the 15 CVEs

Patch now 0 Urgent 3 High 6 Routine 6

Fixed package versions

ProductReleaseFixed in
asteriskFedora 4318.26.4-1.fc43
asterisk-aelFedora 4318.26.4-1.fc43
asterisk-ael-debuginfoFedora 4318.26.4-1.fc43
asterisk-alembicFedora 4318.26.4-1.fc43
asterisk-alsaFedora 4318.26.4-1.fc43
asterisk-alsa-debuginfoFedora 4318.26.4-1.fc43
asterisk-calendarFedora 4318.26.4-1.fc43
asterisk-calendar-debuginfoFedora 4318.26.4-1.fc43
asterisk-corosyncFedora 4318.26.4-1.fc43
asterisk-corosync-debuginfoFedora 4318.26.4-1.fc43
asterisk-curlFedora 4318.26.4-1.fc43
asterisk-curl-debuginfoFedora 4318.26.4-1.fc43
asterisk-dahdiFedora 4318.26.4-1.fc43
asterisk-dahdi-debuginfoFedora 4318.26.4-1.fc43
asterisk-debuginfoFedora 4318.26.4-1.fc43
asterisk-debugsourceFedora 4318.26.4-1.fc43
asterisk-develFedora 4318.26.4-1.fc43
asterisk-faxFedora 4318.26.4-1.fc43
asterisk-fax-debuginfoFedora 4318.26.4-1.fc43
asterisk-festivalFedora 4318.26.4-1.fc43
asterisk-festival-debuginfoFedora 4318.26.4-1.fc43
asterisk-hepFedora 4318.26.4-1.fc43
asterisk-hep-debuginfoFedora 4318.26.4-1.fc43
asterisk-iax2Fedora 4318.26.4-1.fc43
asterisk-iax2-debuginfoFedora 4318.26.4-1.fc43
asterisk-ldapFedora 4318.26.4-1.fc43
asterisk-ldap-debuginfoFedora 4318.26.4-1.fc43
asterisk-luaFedora 4318.26.4-1.fc43
asterisk-lua-debuginfoFedora 4318.26.4-1.fc43
asterisk-mgcpFedora 4318.26.4-1.fc43
asterisk-mgcp-debuginfoFedora 4318.26.4-1.fc43
asterisk-minivmFedora 4318.26.4-1.fc43
asterisk-minivm-debuginfoFedora 4318.26.4-1.fc43
asterisk-mobileFedora 4318.26.4-1.fc43
asterisk-mobile-debuginfoFedora 4318.26.4-1.fc43
asterisk-mwi-externalFedora 4318.26.4-1.fc43
asterisk-mwi-external-debuginfoFedora 4318.26.4-1.fc43
asterisk-mysqlFedora 4318.26.4-1.fc43
asterisk-mysql-debuginfoFedora 4318.26.4-1.fc43
asterisk-odbcFedora 4318.26.4-1.fc43
asterisk-odbc-debuginfoFedora 4318.26.4-1.fc43
asterisk-ossFedora 4318.26.4-1.fc43
asterisk-oss-debuginfoFedora 4318.26.4-1.fc43
asterisk-pjsipFedora 4318.26.4-1.fc43
asterisk-pjsip-debuginfoFedora 4318.26.4-1.fc43
asterisk-portaudioFedora 4318.26.4-1.fc43
asterisk-portaudio-debuginfoFedora 4318.26.4-1.fc43
asterisk-postgresqlFedora 4318.26.4-1.fc43
asterisk-postgresql-debuginfoFedora 4318.26.4-1.fc43
asterisk-radiusFedora 4318.26.4-1.fc43
asterisk-radius-debuginfoFedora 4318.26.4-1.fc43
asterisk-sipFedora 4318.26.4-1.fc43
asterisk-sip-debuginfoFedora 4318.26.4-1.fc43
asterisk-skinnyFedora 4318.26.4-1.fc43
asterisk-skinny-debuginfoFedora 4318.26.4-1.fc43
asterisk-snmpFedora 4318.26.4-1.fc43
asterisk-snmp-debuginfoFedora 4318.26.4-1.fc43
asterisk-sqliteFedora 4318.26.4-1.fc43
asterisk-sqlite-debuginfoFedora 4318.26.4-1.fc43
asterisk-tdsFedora 4318.26.4-1.fc43
asterisk-tds-debuginfoFedora 4318.26.4-1.fc43
asterisk-unistimFedora 4318.26.4-1.fc43
asterisk-unistim-debuginfoFedora 4318.26.4-1.fc43
asterisk-voicemailFedora 4318.26.4-1.fc43
asterisk-voicemail-debuginfoFedora 4318.26.4-1.fc43
asterisk-voicemail-odbcFedora 4318.26.4-1.fc43
asterisk-voicemail-odbc-debuginfoFedora 4318.26.4-1.fc43
asterisk-voicemail-plainFedora 4318.26.4-1.fc43
asterisk-voicemail-plain-debuginfoFedora 4318.26.4-1.fc43

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2022-26499 asterisk: An SSRF issue was discovered in Asterisk through 19.x9.1 0.0774 None reported
Urgent CVE-2022-26651 asterisk: An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert139.8 0.0703 None reported
Urgent CVE-2024-35190 asterisk: Update to Asterisk 18.26.4, addressing numerous security vulnerabilities accumulated since the long-stale 18.12.1 pac...n/a 0.0056 None reported
High CVE-2023-49294 asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 0.4529 None reported
High CVE-2022-26498 asterisk: An issue was discovered in Asterisk through 19.x7.5 0.1652 None reported
High CVE-2024-42365 asterisk: asterisk - security update8.8 0.0470 None reported
High CVE-2022-37325 asterisk: In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup messag...7.5 0.0124 None reported
High CVE-2023-37457 asterisk: Asterisk is an open source private branch exchange and telephony toolkit8.2 0.0112 None reported
High CVE-2025-1131 asterisk: asterisk - security update7.8 0.0022 None reported
Routine CVE-2023-49786 asterisk: Asterisk is an open source private branch exchange and telephony toolkit5.9 0.0530 None reported
Routine CVE-2022-42705 asterisk: A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a r...6.5 0.0132 None reported
Routine CVE-2024-42491 asterisk: Asterisk is an open-source private branch exchange (PBX)5.7 0.0058 None reported
Routine CVE-2025-47779 asterisk: asterisk - security update6.5 0.0053 None reported
Routine CVE-2025-49832 asterisk: Asterisk is an open source private branch exchange and telephony toolkit6.5 0.0053 None reported
Routine CVE-2025-54995 asterisk: Asterisk is an open source private branch exchange and telephony toolkit6.5 0.0051 None reported
Showing 1 to 15 of 15 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.