This is the summer 2025 edition and first anniversary of our spotlight series. The last two months have been surprisingly busy for us in the area of code reviews and we have quite a number of interesting stories to share with you. Among others we will cover a local root exploit we found in systemd v258 release candidates, issues in logrotate drop-in configuration files, newly developed Varlink services and a symlink attack issue in chrony.