● On the wire
Debian cifs-utils Regression Fixed in DSA-6567-2 Advisory//Ubuntu PHP Updates Address Multiple Security Issues and Vulnerabilities//Debian DSA-6566-1 Expat Critical DoS Risks CVE-2026-66046 CVE-2026-76956//Ubuntu RabbitMQ Server Important Cross-Site and DoS Issues USN-8933-1//Debian Xen Critical Escalation Info Disclosure Vuln DSA-6571-1//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Debian Mutt Important DoS Arbitrary Code Execution DSA-6563-1//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Debian SPIP Important Remote Code Execution Risk DSA-6565-1//Ubuntu U-Boot Key Denial of Service Buffer Overflow Risks USN-8930-1//Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)//Ubuntu 26.10 OpenSSH Fixes SSH Command and Access Issues//Ubuntu cifs-utils Fixes Privileged Mount Option Injection//Debian cifs-utils Major Privilege Escalation Vulnerabilities DSA-6567-1//Debian haproxy Critical Denial of Service Vulnern DSA-6570-1//Debian cifs-utils Regression Fixed in DSA-6567-2 Advisory//Ubuntu PHP Updates Address Multiple Security Issues and Vulnerabilities//Debian DSA-6566-1 Expat Critical DoS Risks CVE-2026-66046 CVE-2026-76956//Ubuntu RabbitMQ Server Important Cross-Site and DoS Issues USN-8933-1//Debian Xen Critical Escalation Info Disclosure Vuln DSA-6571-1//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Debian Mutt Important DoS Arbitrary Code Execution DSA-6563-1//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Debian SPIP Important Remote Code Execution Risk DSA-6565-1//Ubuntu U-Boot Key Denial of Service Buffer Overflow Risks USN-8930-1//Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)//Ubuntu 26.10 OpenSSH Fixes SSH Command and Access Issues//Ubuntu cifs-utils Fixes Privileged Mount Option Injection//Debian cifs-utils Major Privilege Escalation Vulnerabilities DSA-6567-1//Debian haproxy Critical Denial of Service Vulnern DSA-6570-1//
PaperCut: zero-day sotto attacco, patch d’emergenza rilasciata
Top story — Notizie

PaperCut: zero-day sotto attacco, patch d’emergenza rilasciata

PaperCut Software ha confermato che una vulnerabilità zero-day nei prodotti NG e MF è già stata sfruttata attivamente in attacchi reali. L’azienda ha rilasciato patch d’emergenza e ha chiesto ai clienti di applicarle subito, anche in assenza di segnali evidenti di compromissione. Tra le misure raccomandate ci sono la limitazione dell’accesso ai server applicativi solo da IP fidati e la…

Read the article →
Sourcesecurityaffairs.com
From the newsroom