Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1234128 * bsc#1234665 * bsc#1239883 * bsc#1243317
* bsc#1241274 * bsc#1241275 * bsc#1241276 * bsc#1242208 * bsc#1243429
* bsc#1242931 Cross-References: * CVE-2025-4207
* bsc#1242300 Cross-References: * CVE-2025-47268
* bsc#1243353 Cross-References: * CVE-2025-5263 * CVE-2025-5264
* bsc#1239909 Cross-References: * CVE-2025-2588
* bsc#1237147 * bsc#1241938 * bsc#1243106 Cross-References:
* bsc#1242008 * bsc#1242009 Cross-References: * CVE-2025-31650
* bsc#1236217 * bsc#1242715 Cross-References: * CVE-2025-22873
* bsc#1243216 Cross-References: * CVE-2025-3875 * CVE-2025-3877
A client-side desync vulnerability can be triggered in Varnish, a high-performance web accelerator. An attacker can abuse a flaw in Varnish¢''s handling of chu…
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2025-47287
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i…
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i…
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2021-3539
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
SQL injection in the PostgreSQL driver has been fixed in the ADOdb database access library for PHP. For Debian 11 bullseye, this problem has been fixed in vers…
A timing side-channel in ECDSA signature computation has been fixed in the cryptography library OpenSSL. For Debian 11 bullseye, this problem has been fixed in…
When you think of supply chains, your mind probably jumps to physical products—a t-shirt passing through farms, factories, trucks, and stores before landing in…
Russian cyber threat actors have been attributed to a state-sponsored campaign targeting Western logistics entities and technology companies since 2022.The act…
* bsc#1235438 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1218424 * bsc#1236045 * bsc#1236046 * bsc#1236801 * jsc#SLE-18320
