Security Notices
CISA Adds Exploited Apple File-Processing Flaw to KEV
Apple's crafted-file code-execution flaw is listed in CISA KEV, with Apple reporting possible targeted exploitation. Prioritize supported devices and high-risk users, apply the matching update, and preserve evidence; patching does not establish absence of prior compromise.
Fortinet Warns of Exploited FortiMail Path Traversal
Fortinet lists fixed FortiMail releases for exploited CVE-2026-104286. Preserve evidence, update each branch, validate mail flow, and retain records.
Amazon Linux Publishes Thirty-Five Live Patches for CVE-2026-80521
Amazon Linux maps one AF_UNIX fix to thirty-five kernel-specific live patches. Match the running kernel and confirm livepatch prerequisites and loaded status; installing every package is wrong, and livepatching does not eliminate native-kernel updates or planned reboots.
Amazon Linux 2023 Kernel Updates Address CVE-2026-80521
Amazon Linux 2023 advisories map an AF_UNIX kernel fix to separate 6.1, 6.12 and 6.18 streams. Select the host's matching supported package and verify runtime state; the brief defect description does not establish remote code execution.
Amazon Linux Updates SSM Agent for Four Vulnerabilities
Amazon Linux SSM Agent updates address bundled dependency flaws and authenticated port-forwarding SSRF that can expose instance-role credentials. Update the deployed agent and validate management workflows; the set does not imply unauthenticated Internet exposure for every flaw.
Debian DSA-6533-1 Updates firefox-esr for Security Vulnerabilities
Debian 13's Firefox ESR update fixes browser security flaws while moving packaging from the 140 to 153 series. Validate managed-browser, profile and extension behavior alongside installation; this is also a branch transition.
Debian DSA-6532-1 Updates tor for a Security Vulnerability
Debian 13 Tor updates address multiple denial-of-service vulnerabilities with fixed package 0.4.9.13-0+deb13u1. Follow the supported trixie update path; the announcement's missing CVE identifiers do not mean the release lacks security impact.
Ubuntu USN-8858-1 Fixes Authen::SASL Vulnerability
Ubuntu Authen::SASL updates address a login-validation flaw, but Canonical's summary and detailed impact descriptions conflict. Apply the matching library build and check authentication success and rejection without presenting either impact account as definitively reconciled.
Ubuntu USN-8859-1 Fixes ImageMagick Vulnerabilities
Ubuntu ImageMagick updates address release-dependent denial-of-service and disclosure flaws. Check ESM or Legacy Support access even on listed newer releases, update the libraries used by image workers, and assess bundled or container copies separately.
Ubuntu USN-8855-1 Fixes GStreamer Bad Plugins Vulnerability
Ubuntu GStreamer Bad Plugins updates address multi-channel WAV parsing that can crash consumers or permit code execution. Match the installed binary and repository entitlement, including applicable ESM Apps channels, then restart affected media workers.