Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

OpenSSH — CVE-2026-123158

Vulnerability High

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

OpenSSH released version 10.6p2 on 5 November 2026 to close a password authentication bypass in sshd affecting Linux systems built on the musl C library with PAM disabled, such as…

LinuxOpenSSHAlpine Linux

GitLab — CVE-2026-97229

Vulnerability Critical

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

CISA has added CVE-2026-97229, a GitLab flaw rated CVSS 10.0, to its catalogue of exploited vulnerabilities. Alpine Linux reports an attempted attack on its own server, which rema…

GitLabRubyCI/CD

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian: DSA-5909-1 moderate: request tracker cross-site scripting

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result in information disclosure, c…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian DSA-5909-1 moderate: request tracker information disclosure

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result in information disclosure, c…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS: DLA-4148-1 critical: vips buffer overflow denial of service

A heap-based buffer overflow was discovered in vips, an image processing system, which could lead to denial of service when processing specially crafted TIFF i…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian 11 bullseye DLA-4147-1 moderate: fig2dev code execution and DoS

Multiple vulnerabilities were found in fig2dev, a utility for converting XFig figure files, which could lead to code execution or denial of service upon specia…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Breaches & leaks

Debian 11: DLA-4144-1 critical: qemu denial of service and info leak

Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service or information leak. CVE-2023-1544

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian 11: DLA-4145-1 urgent: expat XML parser vulnerability fix

An issue has been found in expat, an XML parsing C library. The issue is related to a crash within XML_ResumeParser() because XML_StopParser() can stop/suspend…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Server 15 SP5: 2025:1419-1 important: redis DoS issue

* bsc#1241708 Cross-References: * CVE-2025-21605

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:1420-1 important: redis buffer overflow mitigated

* bsc#1241708 Cross-References: * CVE-2025-21605

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 18.04 LTS USN-7315-2 critical: PostgreSQL arbitrary code execution

PostgreSQL could be made to execute arbitrary code if it received specially crafted input.

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE 15 SP3: 2025:1416-1 important: Linux Kernel Security Fixes

* bsc#1233294 * bsc#1235431 Cross-References: * CVE-2024-50205

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Enterprise Micro: 2025:1413-1 low: augeas NULL pointer fix

* bsc#1239909 Cross-References: * CVE-2025-2588

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:1414-1 critical: MozillaFirefox privilege escalation

* bsc#1241621 Cross-References: * CVE-2025-2817

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:1403-1 critical: Linux Kernel Bluetooth and netfilter issues

* bsc#1235431 * bsc#1240840 Cross-References: * CVE-2024-56650

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux 12 SP5: 2025:1408-1 important: Kernel Fix for netfilter

* bsc#1235431 Cross-References: * CVE-2024-56650

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 40: perl-Devel-Cover moderate: fix heap overflow issue

Fix CVE-2024-56406

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 40 perl-PAR-Packer 2025-8445f115f6 critical: heap overflow

Fix CVE-2024-56406

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 40: perl 2025-8445f115f6 critical: CVE-2024-56406 buffer overflow

Fix CVE-2024-56406

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:1402-1 important: Linux Kernel Security Threats Fixed

* bsc#1235431 * bsc#1240840 Cross-References: * CVE-2024-56650

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 18.04 & 16.04: USN-7423-2 critical: binutils execution flaws

Several security issues were fixed in GNU binutils.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian 11: DLA-4142-1 Severe Vulnerability in libraw Buffer Overflow

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). CVE-2025-43961

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:1392-1 important: CVE-2024-56650 Linux Kernel RT Security Patch

* bsc#1235431 Cross-References: * CVE-2024-56650

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian 11: DLA-4141-1 critical: poppler capacity threats

Multiple vulnerabilities have been fixed in the PDF rendering library poppler. CVE-2020-36023

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:1380-1 moderate: libraw out-of-bounds security patch

* bsc#1241584 * bsc#1241585 Cross-References: * CVE-2015-3885

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:1381-1 moderate: cifs-utils Container Security Fix

* bsc#1239680 Cross-References: * CVE-2025-2312