The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969, CVE-2025-46420, CVE-2025-46421, CVE-2025-4945
* bsc#1241584 * bsc#1241585 * bsc#1241642 * bsc#1241643
* bsc#1236826 * bsc#1239671 * bsc#1241012 Cross-References:
* bsc#1241274 * bsc#1241275 * bsc#1241276 Cross-References:
You've probably been there '' sitting with a product team, deep in technical specs, trying to figure out how to turn everything into something that doesn't jus…
Cisco has released security patches to address a critical security flaw impacting the Identity Services Engine (ISE) that, if successfully exploited, could all…
Update to 3.0.14 and fix CVE-2025-27110
Alright, let's talk about open-source AI models . If you're a Linux admin or developer, and you're already spinning up VMs, writing scripts, or monitoring logs…
* bsc#1219340 * bsc#1230423 * bsc#1233323 * bsc#1233325 * bsc#1233326
Twig could be made to expose sensitive information if it opened a specially crafted file.
* bsc#1215199 * bsc#1223809 * bsc#1224013 * bsc#1224597 * bsc#1224757
* bsc#1215199 * bsc#1223809 * bsc#1224013 * bsc#1224597 * bsc#1224757
* bsc#1234128 * bsc#1234665 * bsc#1239883 * bsc#1243317
* bsc#1241274 * bsc#1241275 * bsc#1241276 * bsc#1242208 * bsc#1243429
* bsc#1242931 Cross-References: * CVE-2025-4207
* bsc#1242300 Cross-References: * CVE-2025-47268
* bsc#1243353 Cross-References: * CVE-2025-5263 * CVE-2025-5264
* bsc#1239909 Cross-References: * CVE-2025-2588
* bsc#1237147 * bsc#1241938 * bsc#1243106 Cross-References:
* bsc#1242008 * bsc#1242009 Cross-References: * CVE-2025-31650
* bsc#1236217 * bsc#1242715 Cross-References: * CVE-2025-22873
* bsc#1243216 Cross-References: * CVE-2025-3875 * CVE-2025-3877
A client-side desync vulnerability can be triggered in Varnish, a high-performance web accelerator. An attacker can abuse a flaw in Varnish¢''s handling of chu…
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2025-47287