NewsSANS ISC Diary
Apple Patches for October 2026, (Mon, Oct 26th)
Teaser from the source
Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update.
This is the RSS-feed teaser. Read the full article at the original source.
Read at SANS ISC DiaryMore on Patches
Other advisories
- Not ratedosv:ECHO-8083-7310-cd1aWindows-only. On Windows ReadWriteLock acts on SQLite side files that another local user places beside its database. The fix (PR #834) is Windows ACL handling. The POSIX side of the same advisory, GHSA-v4x8, is backported in patches/GHSA-v4x8-3wr5-3wq8.patch. Echo builds and ships this library for Linux only.
- CriticalCVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- Criticalpwn_watch:fortinet-ai-found-flaws-hardening-release-oct-2026Fortinet patches critical AI-found flaws in FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator
- Not ratedosv:SUSE-SU-2026:4560-1Security update for openssl-3-livepatches
- HighCVE-2026-84782Security update for openssl-3-livepatches
- HighCVE-2026-84782Security update for openssl-3-livepatches
- Not ratedosv:SUSE-SU-2026:4418-1Security update for openssl-3-livepatches
- Not ratedosv:CLEANSTART-2026-EN85312Git for Windows is a fork of Git containing Windows-specific patches
Other news entries
- Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ FlawsNewsSecurityWeek
- HPE Patches Dozens of Critical Flaws in Networking ProductsNewsSecurityWeek
- Apple backports CoreGraphics zero-day patches to older iPhonesNewsBleepingComputer
- This is Fine: What NetScaler Zero-Days Tell Us About the New NormalNewsSecurityWeek
- Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patchesNewsBleepingComputer
- Microsoft releases emergency .NET patches for critical Brotli flawNewsBleepingComputer
- Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0NewsCSO Online
- HPE patches eight max severity RCE and auth bypass AOS flawsNewsBleepingComputer
Source: https://isc.sans.edu/diary/rss/33458
ID