Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: mariadb10.11 2024-6ea93e629b Security Advisory Updates
MariaDB 10.11.8 & Galera 26.4.18 Release notes: https://mariadb.com/kb/en/mariadb-10-11-7-release-notes/ https://mariadb.com/kb/en/mariadb-10-11-8-release-note…
Ubuntu 6802-1: PostgreSQL Security Advisory Updates
PostgreSQL could be made to expose sensitive information.
Ubuntu 6801-1: PyMySQL Security Advisory Updates
PyMySQL could be vulnerable to SQL injection attacks.
PostgreSQL Security Vulns Allow for XSS, MFA Bypass
Two critical security vulnerabilities were found in pgAdmin, the open-source administration tool for PostgreSQL . The vulnerabilities assigned CVE-2024-4216 an…
Slackware: 2024-141-01: mariadb Security Advisory Update
New mariadb packages are available for Slackware 15.0 and -current to fix a security issue.
Gentoo: GLSA-202405-25: MariaDB: Security Advisory Updates
Multiple vulnerabilities have been discovered in MariaDB, the worst fo which can lead to arbitrary execution of code.
Debian LTS: DLA-3764-1: postgresql-11 security update
In the PostgreSQL database server, a late privilege drop in the REFRESH MATERIALIZED VIEW CONCURRENTLY command could allow an attacker to trick a user with hig…
Docker, Hadoop, Confluence, Redis at Risk of New Cryptomining Attack
A recent attack campaign targeted publicly accessible Docker , Hadoop , Confluence, and Redis deployments. The attackers exploited misconfigurations and known …
Ubuntu 6656-1: PostgreSQL vulnerability
PostgreSQL could be made to run arbitrary SQL.
Cryptocurrency Mining Migo Malware Attacks Linux Redis Servers
A new malware dubbed ''Migo'' that is targeting Linux Redis servers to mine cryptocurrency via a cryptojacking attack has been discovered. This campaign employ…
New Migo Malware Targeting Redis Servers for Cryptocurrency Mining
A novel malware campaign has been observed targeting Redis servers for initial access with the ultimate goal of mining cryptocurrency on compromised Linux host…
Mageia 2024-0043: postgresql15 and postgresql13 security update
The updated packages fix a security vulnerability: PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL. (CVE-2024-0985) Referenc…
Debian: DSA-5610-1: redis security update
Multiple security issues were discovered in Redis, a persistent key-value database, which could result in the execution of arbitrary code or ACL bypass.
SUSE: 2024:399-1 suse/rmt-mariadb Security Update
The container suse/rmt-mariadb was updated. The following patches have been included in this update:
SUSE: 2024:398-1 suse/rmt-mariadb-client Security Update
The container suse/rmt-mariadb-client was updated. The following patches have been included in this update:
SUSE: 2024:394-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
SUSE: 2024:393-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
Ubuntu 6600-1: MariaDB vulnerabilities
Several security issues were fixed in MariaDB.
SUSE: 2024:282-1 suse/rmt-mariadb-client Security Update
The container suse/rmt-mariadb-client was updated. The following patches have been included in this update:
SUSE: 2024:266-1 suse/rmt-mariadb Security Update
The container suse/rmt-mariadb was updated. The following patches have been included in this update:
Ubuntu 6538-2: PostgreSQL vulnerabilities
Several security issues were fixed in PostgreSQL.
Ubuntu 6583-1: MySQL vulnerabilities
Several security issues were fixed in MySQL.
MongoDB Suffers Security Breach, Exposing Customer Data
MongoDB on Saturday disclosed it's actively investigating a security incident that has led to unauthorized access to "certain" corporate systems, resulting in …
Fedora 37: redis 2023-0e9e7544df
**Redis 7.0.13** Released Wed 06 Sep 2023 15:00:00 IDT Upgrade urgency SECURITY: See security fixes below. Security Fixes * (**CVE-2023-41053**) Redis does not…