Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1242300 Cross-References: * CVE-2025-47268
* bsc#1243353 Cross-References: * CVE-2025-5263 * CVE-2025-5264
* bsc#1239909 Cross-References: * CVE-2025-2588
* bsc#1242008 * bsc#1242009 Cross-References: * CVE-2025-31650
* bsc#1236217 * bsc#1242715 Cross-References: * CVE-2025-22873
* bsc#1243216 Cross-References: * CVE-2025-3875 * CVE-2025-3877
A client-side desync vulnerability can be triggered in Varnish, a high-performance web accelerator. An attacker can abuse a flaw in Varnish¢''s handling of chu…
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2025-47287
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i…
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i…
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2021-3539
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Russian cyber threat actors have been attributed to a state-sponsored campaign targeting Western logistics entities and technology companies since 2022.The act…
An update that fixes one vulnerability is now available.
An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a pot…
An update that fixes one vulnerability is now available.
* bsc#1241678 Cross-References: * CVE-2024-10041
The system could be made to crash or run programs as an administrator.
Vanilla upstream kernel version 6.6.88 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mage…
Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language- server to version 5.6.0
The release of Tails 6.15 is more than just a routine update''it's a decisive step forward in strengthening secure, anonymous computing for privacy-conscious u…
Upstream kernel version 6.6.87 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
* bsc#1233294 * bsc#1235431 Cross-References: * CVE-2024-50205
A flaw was discovered in the implementation of the assert() function in the GNU C Library, the C standard library implementation used by Debian. When the asser…
