Security Notices
Debian Updates rsync for 33 Access, Disclosure, and Code-Execution Flaws
Debian 13 rsync updates address thirty-three access, disclosure and execution-related flaws. Inventory both transfer endpoints and scheduled jobs, coordinate restarts, and validate with disposable destinations rather than risking the only backup or live data.
Ubuntu USN-8487-2 Corrects the curl CVE-2026-8927 Fix
Ubuntu 14.04 Legacy Support corrects an incomplete curl fix involving retained proxy-authentication credentials. Update installed libcurl consumers as well as the command-line tool; the earlier advisory's package alone does not establish protection.
Debian Updates Dovecot for 25 Mail-Server Vulnerabilities
Debian 13 Dovecot updates address twenty-five flaws, including mailbox access-control bypass and malicious Sieve handling. Update affected components, coordinate mail-service restarts, and test both permitted and denied mailbox access with controlled accounts.
Debian Updates WordPress for XSS, Privilege Escalation, and RCE
Debian 13 WordPress updates address three core flaws, including a KEV-listed issue. Confirm the active site is Debian-managed, preserve matching database and files, and coordinate forensic review; core patching does not establish plugin or theme security.
Debian Updates Flatpak for Eight Sandbox Vulnerabilities
Debian 13 Flatpak updates address malicious-application denial of service and information disclosure. Update host-side packages and validate portal workflows while preserving least-privilege permissions; granting broad host-file access is not a substitute for the fix.
WatchGuard AP 3.4.8 Fixes Three Access and Command-Injection Vulnerabilities
WatchGuard AP 3.4.8 fixes internal-API access and command-injection flaws plus an administrator-only diagnostic CLI issue. Update access-point firmware while preserving coverage and management access; this is not a Firebox advisory.
Ubuntu USN-8839-1 Fixes Atril Vulnerabilities
Ubuntu Atril updates address code-execution risk in crafted PDF actions, with two older flaws scoped only to Ubuntu 16.04. Install the release-matched viewer update and reopen sessions before handling unknown documents.
Ubuntu USN-8838-1 Fixes catdoc Vulnerabilities
Ubuntu catdoc updates fix malformed Office-document parsing that can crash extraction jobs or permit code execution. Update the binary used by automated upload processing as well as desktop tools, and validate ordinary document and spreadsheet extraction.
Ubuntu USN-8837-1 Fixes pdfminer Vulnerabilities
Ubuntu pdfminer fixes address crafted-PDF parsing flaws that can execute code in the consuming process. Inventory document-ingestion workers and Python environments, update the actual parser package, and restart long-lived consumers before benign regression checks.
Ubuntu USN-8835-1 Fixes Emacs Vulnerability
Ubuntu Emacs updates address memory corruption from crafted SVG images, with crash or information-exposure risk. Update the installed frontend and supporting packages, save work, and restart sessions or daemons; code execution is not established here.