Security Advisories

This page lists every published advisory by Blueberry Software AD PSIRT.

Advisories follow the identifier scheme BBSA-YYYY-NNN (Blueberry Software Advisory), where YYYY is the calendar year of publication and NNN is a per-year counter starting at 001.

Each advisory is published in two formats from the same source:

• HTML — human-readable, this site
• CSAF 2.0 JSON — machine-readable, OASIS standard, mirrored at /.well-known/csaf/ and indexed by aggregators (BSI, CISA, ENISA)

Both formats carry a detached OpenPGP signature from the PSIRT key. Verify before trusting.

Subscribe

• RSS feed: /security/advisories/index.xml
• CSAF feed: /.well-known/csaf/provider-metadata.json
• Email list: (coming soon)

Index

Advisories below are listed newest-first. Click an entry for the full text, affected versions, fix information, and references.