The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i…
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2021-3539
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Russian cyber threat actors have been attributed to a state-sponsored campaign targeting Western logistics entities and technology companies since 2022.The act…
An update that fixes one vulnerability is now available.
An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a pot…
An update that fixes one vulnerability is now available.
* bsc#1241678 Cross-References: * CVE-2024-10041
The system could be made to crash or run programs as an administrator.
Vanilla upstream kernel version 6.6.88 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mage…
Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language- server to version 5.6.0
The release of Tails 6.15 is more than just a routine update''it's a decisive step forward in strengthening secure, anonymous computing for privacy-conscious u…
Upstream kernel version 6.6.87 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
* bsc#1233294 * bsc#1235431 Cross-References: * CVE-2024-50205
A flaw was discovered in the implementation of the assert() function in the GNU C Library, the C standard library implementation used by Debian. When the asser…
* bsc#1235431 * bsc#1240840 Cross-References: * CVE-2024-56650
* bsc#1235431 Cross-References: * CVE-2024-56650
VulnCon 2025 , recently held in Raleigh, NC, created a dynamic stage for security professionals and open-source advocates to connect, share, and collaborate on…
* bsc#1241584 * bsc#1241585 Cross-References: * CVE-2015-3885
* bsc#1239680 Cross-References: * CVE-2025-2312
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Cybersecurity researchers have disclosed three security flaws in the Rack Ruby web server interface that, if successfully exploited, could enable attackers to …
Update to 1.24.1, fixes CVE-2025-2291.
Backport fixes for CVE-2025-32910, CVE-2025-32911, CVE-2025-32913 Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906 CVE-2025-32907…