News
NewsLiteSpeed Cache for WordPress: CVE-2026-93389 flaw exposes WooCommerce carts
LiteSpeed patched v7.9.2 a vulnerability exposing WooCommerce cart and checkout data. Plugin used on 7+ million sites.
NewscPanel adds AI App Hosting: guided Node.js app deployment from WHM 138
cPanel integrates into Meridian a guided workflow for publishing Node.js apps generated with AI tools. Requires cPanel & WHM 138 or later and provider activation.
NewsUSN-8999-1: Ubuntu Patches 11 Vulnerabilities in Pillow, from DoS to Possible RCE
Ubuntu has released patches for 11 CVEs in Pillow across 22.04, 24.04 and 26.04 LTS: decompression bombs, crashes and two flaws with possible code execution.
NewsUSN-8998-1: Ubuntu patches HTTP request smuggling flaw in Squid
Canonical released a patch on 4 November for CVE-2026-61642: Squid on Ubuntu 26.04 LTS must be updated to 7.7-0ubuntu0.26.04.2.
NewsUSN-8997-1: Ubuntu patches DoS in Net-SNMP SMUX module
An unauthenticated connection to the SMUX module could hang snmpd indefinitely. Ubuntu releases patches for 26.04, 24.04 and 22.04 LTS.
NewsUSN-7530-2: Ubuntu extends ADOdb patch to LTS, Ubuntu Pro required
Canonical backports ADOdb SQL injection fix from 25.04 and 24.10 to LTS releases 16.04–24.04. Patch available only via ESM Apps subscription.
NewsUSN-8996-1: APT flaw allows installation of unverified packages as root
Ubuntu patches CVE-2026-109518: an on-path attacker can exploit APT hard links to install unverified packages with root privileges.
NewsCloudLinux MAx Cache now supports W3 Total Cache
W3 Total Cache 2.11.0 integrates with MAx Cache on CloudLinux/cPanel servers: Apache or Nginx serve cached pages without PHP processing.
NewsCakePHP: Ubuntu patches 2016 flaw, but Legacy add-on required
USN-8978-1 addresses an IP spoofing vulnerability in CakePHP on Ubuntu 16.04, but the package is only available through Ubuntu Pro's Legacy add-on.
NewsUbuntu patches Swift Mailer flaw from 2016 on 16.04 ESM
USN-8986-1 closes a legacy command injection vulnerability in Swift Mailer on Ubuntu 16.04 ESM. Update the package to version 5.4.1-1ubuntu1+esm1.
NewsUSN-8987-1: Ubuntu patches two legacy libuser flaws on 16.04
Canonical releases fixes for CVE-2015-3245 and CVE-2015-3246 in libuser, but only for Ubuntu Pro users with the Legacy add-on on 16.04.
NewsUbuntu fixes rear: initrd readable by anyone with GRUB_RESCUE enabled
USN-8988-1 fixes CVE-2024-23301: with GRUB_RESCUE enabled, rear created a world-readable initrd accessible to any local user.
NewsSOGo password reset flaw allows account takeover; patch available only for Ubuntu Pro
Ubuntu publishes USN-8993-1: SOGo 26.04 LTS password reset link can be hijacked. Fix available only via Ubuntu Pro ESM.
NewsUSN-8994-1: Nine vulnerabilities in libvips, from DoS to code execution
Ubuntu patches nine vulnerabilities in libvips, the image processing library behind Sharp and many image pipelines. Some enable arbitrary code execution.
NewsUSN-8972-1: Ubuntu patches HAProxy DoS flaws on HTTP/2 and HTTP/1.1
Canonical released USN-8972-1 on 3 November 2026: two DoS vulnerabilities in HAProxy affecting HTTP/2 PING frames and HTTP/1.1 chunked requests.
NewsUSN-8970-1: Three GVfs vulnerabilities on Ubuntu, from data leaks to DoS
Ubuntu publishes USN-8970-1: three CVEs in GVfs across SFTP, AFP and MTP. Patches available for 22.04, 24.04 and 26.04 LTS.
NewsCloudflare launches Zero Wire: public CVE cards for critical vulnerabilities
Cloudflare has launched a free public feed on Radar of critical vulnerability cards, including exploitation status and links to vendor patches.
NewsUSN-8969-1: Ubuntu patches 22 vulnerabilities in Bind, one leading to RCE
Ubuntu released on 3 November a security patch for bind9 closing 22 CVEs, including a potential RCE via GSS-TSIG. Update resolver instances immediately.
NewsUSN-8961-1: Ubuntu updates kernel 5.15 with ABI change and mandatory reboot
Ubuntu releases USN-8961-1: new kernel 5.15 for 22.04 and 20.04 LTS, ABI change requires reboot and recompilation of third-party kernel modules.
NewsUSN-8959-1: Ubuntu patches Linux kernel on 26.04 and 24.04, ABI change
Canonical releases USN-8959-1: vulnerabilities in Linux kernel on Ubuntu 26.04 and 24.04 LTS. ABI change requires recompilation of third-party kernel modules and system restart.