Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

OpenSSH — CVE-2026-123158

Vulnerability High

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

OpenSSH released version 10.6p2 on 5 November 2026 to close a password authentication bypass in sshd affecting Linux systems built on the musl C library with PAM disabled, such as…

LinuxOpenSSHAlpine Linux

GitLab — CVE-2026-97229

Vulnerability Critical

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

CISA has added CVE-2026-97229, a GitLab flaw rated CVSS 10.0, to its catalogue of exploited vulnerabilities. Alpine Linux reports an attempted attack on its own server, which rema…

GitLabRubyCI/CD

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Advisory for Fedora 42 on BIND 9.18.41 Spoofing Risks and DNSSEC

Update to 9.18.41 (rhbz#2405786) Security fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing atta…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42: Qt Creator Bugfix for CVE-2025-10729 - Use After Free

Qt 6.9.3 bugfix update.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42 qt6-qtwebchannel Bugfix Use-After-Free CVE-2025-10729

Qt 6.9.3 bugfix update.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42: Zeal Critical QT Use-After-Free Vulnerability 2025-945dff8564

Qt 6.9.3 bugfix update.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42: Bugfix for qt6-qtwebview Addressing CVE-2025-10729 Issue

Qt 6.9.3 bugfix update.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian: pdns-recursor Critical Cache Pollution Threat DSA-6045-1

Two vulnerabiliites have been discovered in PDNS Recursor, a resolving name server: Delegation information was insufficiently validated, which could result in …

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed: java-25-openjdk Security Alerts CVE-2025-53057 & More

An update that solves 3 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: Critical Buffer Overflow Vulnerability in Strongswan CVE-2025-62291

* bsc#1251941 Cross-References: * CVE-2025-62291

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: Important Advisory for strongswan Buffer Overflow CVE-2025-62291

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS: xorg-server Important Privilege Escalation Threat DLA-4353-1

Jan-Niklas Sohn discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian 2:21.1.7-3 xorg-server Critical Privilege Escalation DSA-6044-1

Jan-Niklas Sohn discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian 11: DLA-4352-1 python-authlib Important Security Threats

Multiple vulnerabilities have been found in python-authlib, a Python library for OAuth and OpenID Connect servers.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42: git-lfs Critical Fix for Cross-Origin Bypass 2025-f8d1e1df04

Update to latest version (#2404637) Fix CVE-2025-47910, CVE-2025-47906, CVE-2025-26625

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43: git-lfs CVE-2025-26625 Critical Threat Advisory 2025-7dfe24dbaa

Update to latest version (#2404637) Fix CVE-2025-26625

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 41: Chromium 141.0.7390.122 High CVE-2025-12036 Implementation Issue

Update to 141.0.7390.122 High CVE-2025-12036 chromium: Inappropriate implementation in V8

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 41: git-lfs Important Security Updates for CVEs 2025-5872b9ec46

Update to latest version (#2404637) Fix CVE-2025-22870, CVE-2025-47910, CVE-2025-47906, CVE-2025-26625

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu: Squid Important Information Disclosure USN-7845-1 CVE-2025-62168

Squid would allow unintended access to sensitive information over the network.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: Update on python-Authlib Moderate DoS Threat CVE-2025-62706

* bsc#1252504 Cross-References: * CVE-2025-62706

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: python-Authlib Moderate Denial of Service Fix 2025:3842-1

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Advisory 2025:3844-1 for ImageMagick CVE-2025-62171 Overflow

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: Xen Important Input Sanitisation Issues Advisory 2025:3843-1

An update that solves five vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: Xen Important Fixes for Input Sanitization Issues 2025:3843-1

* bsc#1248807 * bsc#1251271 Cross-References: * CVE-2025-27466

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: Advisory 2025:3844-1 for ImageMagick BMP Decoder CVE-2025-62171

* bsc#1252282 Cross-References: * CVE-2025-62171

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed: Xen Moderate Security Fix CVE-2025-58147 2025:15673-1

An update that solves one vulnerability can now be installed.