Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

OpenSSH — CVE-2026-123158

Vulnerability High

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

OpenSSH released version 10.6p2 on 5 November 2026 to close a password authentication bypass in sshd affecting Linux systems built on the musl C library with PAM disabled, such as…

LinuxOpenSSHAlpine Linux

GitLab — CVE-2026-97229

Vulnerability Critical

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

CISA has added CVE-2026-97229, a GitLab flaw rated CVSS 10.0, to its catalogue of exploited vulnerabilities. Alpine Linux reports an attempted attack on its own server, which rema…

GitLabRubyCI/CD

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Micro: 2025:01771-1 moderate: iputils integer overflow

* bsc#1242300 * bsc#1243284 Cross-References: * CVE-2025-47268

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:01772-1 moderate: postgresql14 encoding issue fix

* bsc#1242931 Cross-References: * CVE-2025-4207

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Micro 5.1: 2025:01762-1 moderate: brotli integer overflow

* bsc#1175825 Cross-References: * CVE-2020-8927

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Enterprise Micro: 2025:01763-1 low: augeas security fix

* bsc#1239909 Cross-References: * CVE-2025-2588

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE 12 SP5: 2025:01765-1 moderate: Fix for PostgreSQL Encoding Issue

* bsc#1242931 Cross-References: * CVE-2025-4207

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:01766-1 moderate: postgresql16 encoding issue

* bsc#1242931 Cross-References: * CVE-2025-4207

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 41: 2025-575023fff7 critical: rust-hashlink double free

Security update for CVE-2025-4574, GHSA-pg9f-39pc-qf8g: by rebuilding ruff, we ensure that it uses version 0.5.15 of the crossbeam-channel crate library. rust-…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 41: FEDORA-2025-575023fff7 critical: rust-rusqlite security issue

Security update for CVE-2025-4574, GHSA-pg9f-39pc-qf8g: by rebuilding ruff, we ensure that it uses version 0.5.15 of the crossbeam-channel crate library. rust-…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 41: 2025-575023fff7 critical: ruff crossbeam double free

Security update for CVE-2025-4574, GHSA-pg9f-39pc-qf8g: by rebuilding ruff, we ensure that it uses version 0.5.15 of the crossbeam-channel crate library. rust-…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 41: Update to dnsdist 1.9.10 Critical: DoS via TCP Exchange

Updated to 1.9.10, this fixes CVE-2025-30193: Denial of service via crafted TCP exchange

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Breaches & leaks

Debian 11 bullseye: DLA-4191-1 critical: firefox-esr code execution threat

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or cross-origin …

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian: DSA-5930-1 critical: libavif denial of service and code execution

Multiple vulnerabilities were discovered in libavif, a library for handling .avif files, which could result in denial of service or potentially the execution o…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian: DSA-5929-1 critical: chromium code execution and DoS

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:20331-1 critical: python-httpcore and python-h11 exploit fix

* bsc#1241872 Cross-References: * CVE-2025-43859

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Micro 6.0: 2025:20332-1 critical: glibc Local Root Exploit Fix

* bsc#1234128 * bsc#1239883 * bsc#1243317 Cross-References:

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:20333-1 moderate: libxml2 buffer under-read and out-of-bounds

* bsc#1241453 * bsc#1241551 Cross-References: * CVE-2025-32414

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Micro 6.0: 2025:20334-1 important advisory: perl heap overflow

* bsc#1241083 Cross-References: * CVE-2024-56406

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:01537-1 critical security vulnerabilities in tomcat10 revealed

* bsc#1242008 * bsc#1242009 Cross-References: * CVE-2025-31650

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:01551-1 moderate: go1.24 security patch for os.Root access

* bsc#1236217 * bsc#1242715 Cross-References: * CVE-2025-22873

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:01464-1 moderate: ImageMagick image processing errors

* bsc#1241658 * bsc#1241659 Cross-References: * CVE-2025-43965

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:01660-2 important: MozillaThunderbird security issues addressed

* bsc#1243216 Cross-References: * CVE-2025-3875 * CVE-2025-3877

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE 15:01737-1 important: gstreamer-plugins-bad Remote Code Exec Risk

* bsc#1242809 Cross-References: * CVE-2025-3887

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:01735-1 low: wxWidgets-3_2

* bsc#1239902 Cross-References: * CVE-2024-58249

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:01735-1 low: wxWidgets-3_2 critical crash vulnerability

* bsc#1239902 Cross-References: * CVE-2024-58249