Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

OpenSSH — CVE-2026-123158

Vulnerability High

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

OpenSSH released version 10.6p2 on 5 November 2026 to close a password authentication bypass in sshd affecting Linux systems built on the musl C library with PAM disabled, such as…

LinuxOpenSSHAlpine Linux

GitLab — CVE-2026-97229

Vulnerability Critical

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

CISA has added CVE-2026-97229, a GitLab flaw rated CVSS 10.0, to its catalogue of exploited vulnerabilities. Alpine Linux reports an attempted attack on its own server, which rema…

GitLabRubyCI/CD

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: erlang Moderate Resource Usage Concerns 2026:19004-1

An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 16.0: Major Security Updates Addressing BIND CVE-2025-40778

An update that solves 3 vulnerabilities and has 4 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed: Chromedriver Moderate Security Update 2026:10057-1

An update that solves 10 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian: Thunderbird Critical Arbitrary Code Exec DSA-6103-1 CVE-2025-14327

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), thes…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian: python-urllib3 Important Denial of Service DSA-6102-1

Several vulnerabilities were discovered in python-urllib3, a HTTP library with thread-safe connection pooling for Python3, which could result in denial of serv…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: zk Moderate CVE-2025-58181 DoS Threat Advisory 2026:0016-1

An update that fixes one vulnerability is now available.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: zk Moderate Security Update 2026:0017-1 CVE-2025-58181

An update that fixes one vulnerability is now available.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: fluidsynth Moderate NULL Pointer Deference CVE-2025-56225

An update that fixes one vulnerability is now available.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: Kernel Important Security Update 2026:0140-1 CVE and Fixes

An update that solves 157 vulnerabilities, contains one feature and has 26 security fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian: FFmpeg Critical Denial of Service Threat DLA-4440-1 CVE-2023-6603

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42: python3.12 High CVE-2025-12084 DoS Fix FEDORA-2026-8e0e785a72

Security fix for CVE-2025-12084 Require at least the same expat version as used during the build time

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora: foomuuri Critical D-Bus Auth Fix CVE-2025-67603 2026-63f333201f

Upstream update to v0.31 with fixes to CVE-2025-67603 and CVE-2025-67858. CVE-2025-67603: Add PolicyKit authorization to D-Bus methods. CVE-2025-67858: Verify …

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43: HarfBuzz Important Null Pointer Fix CVE-2026-22693

Backport security fix for CVE-2026-22693 (fix RHBZ#2429288)

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43: freerdp Critical Heap Buffer Overflow Advisory 2026-79f923d917

Update to 3.20.2

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed: libwireshark Moderate Security Update 2026:10056-1

An update that solves 4 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: avahi Moderate Security Update Advisory 2026:10052-1

An update that solves 3 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: Python Moderate Security Update CVE-2025-12084 2026:0133-1

An update that solves three vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: python310 Moderate DoS Availability Issues 2026:0130-1

An update that solves three vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Python310 Moderate DoS Vulnerabilities SUSE-SU-2026:0130-1

An update that solves three vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 18.04: Git Critical Credential Issues USN-7964-1 CVE-2024-50349

Several security issues were fixed in Git.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 24.04 LTS SimGear Important Exec Risk USN-7965-1 CVE-2025-0781

SimGear could be made to run programs as an administrator if it opened a specially crafted file.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 16.0: Tomcat Important RCE DoS Vuln 2026:20034-1

An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: gpg2 Important Memory Corruption Threat CVE-2025-68973

An update that solves one vulnerability and has 4 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: curl Moderate Security Fix for 5 Issues 2026:20031-1

An update that solves 5 vulnerabilities and has 5 bug fixes can now be installed.