The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A client-side desync vulnerability can be triggered in Varnish, a high-performance web accelerator. An attacker can abuse a flaw in Varnish¢''s handling of chu…
A client-side desync vulnerability can be triggered in Varnish, a high-performance web accelerator. An attacker can abuse a flaw in Varnish¢''s handling of chu…
Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toString()` method is not allowed by the sec…
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2025-47287
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2025-47287
x86: Indirect Target Selection [XSA-469, CVE-2024-28956]
The update for net-tools announced in DSA 5923-1 introduced a regression for ifconfig always showing zero value packet counters. Updated packages are now avail…
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i…
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i…
* bsc#1242809 Cross-References: * CVE-2025-3887
* bsc#1243268 Cross-References: * CVE-2025-47287
* bsc#1242809 Cross-References: * CVE-2025-3887
* bsc#1243268 Cross-References: * CVE-2025-47287
* bsc#1243313 Cross-References: * CVE-2025-47273
* bsc#1243356 Cross-References: * CVE-2025-21490
* bsc#1242809 Cross-References: * CVE-2025-3887
Latest upstream release. Changelog: https://github.com/gorhill/uBlock/releases/tag/1.64.0 . Fixes CVE-2025-4215 .
The package bind before version 9.20.9-1 is vulnerable to denial of service.
The package varnish before version 7.7.1-1 is vulnerable to content spoofing.
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2021-3539
* bsc#1243313 Cross-References: * CVE-2025-47273
* bsc#1243303 Cross-References: * CVE-2025-4918 * CVE-2025-4919
* bsc#1243313 Cross-References: * CVE-2025-47273
* bsc#1242931 Cross-References: * CVE-2025-4207