Hi there,
This is a pre-notification so you can prepare for an upcoming security-focused maintenance release for PaperCut NG/MF.
On the 14th March 2024 (Australian Eastern Daylight Time), there will be PaperCut MF & NG maintenance releases containing several security fixes for newly discovered vulnerabilities.
After a risk assessment of the remediated vulnerabilities, PaperCut has decided to adopt the pre-notification approach for this release. This is to allow organizations to prepare for an upgrade.
We understand these high-priority security patches are disruptive. To protect organizations against potential n-day attacks, PaperCut will not be sharing specific details publicly until the maintenance releases containing all required fixes have been made available on the 14th March.
We are sharing this information with you now to prepare you for the release, and to allow you to plan for scheduling upgrades.
Security issues being addressed
PaperCut has reserved and allocated the following CVEs.