Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2020:1423-1 important: mariadb-connector
An update that fixes one vulnerability is now available.
openSUSE: 2020:0430-1: moderate: python-mysql-connector-pyth
An update that fixes one vulnerability is now available.
openSUSE: 2020:0409-1: moderate: python-mysql-connector-pyth
An update that fixes one vulnerability is now available.
SUSE: 2020:0752-1 moderate: postgresql
An update that fixes one vulnerability is now available.
SUSE: 2020:0715-1 postgresql
An update that fixes one vulnerability is now available.
SUSE: 2020:0589-1 postgresql
An update that fixes one vulnerability is now available.
SUSE: 2020:0586-1 postgresql
An update that fixes one vulnerability is now available.
SUSE: 2020:0523-1 moderate: mariadb-1
An update that fixes one vulnerability is now available.
SUSE: 2019:2707-1 important: postgresql10
An update that fixes one vulnerability is now available.
SUSE: 2019:2687-1 moderate: mariadb-100
An update that fixes 6 vulnerabilities is now available.
SUSE: 2019:2461-1 moderate: mariadb
An update that fixes 6 vulnerabilities is now available.
Debian LTS pgextwlist Security Update DLA-4806-1 CVE-2023-39417
An issue has been found in pgextwlist, a Postgres extensions that implements extension whitelisting. The issue is related to substituting extension schemas or …
Fedora pgAdmin4 Critical Data Issues Remote Access 2026-f0550055a7
Fedora 44 has released an update for pgAdmin 4 to version 9.17, fixing various security vulnerabilities and enhancing features for PostgreSQL administration an…
Debian pgextwlist SQL Injection Risk Fix DSA-6385-1 CVE-2023-39417
Guillaume Winter discovered that pgextwlist, an extension for PostgreSQL implementing a whitelist mechanism for PostgreSQL extensions, was susceptible to SQL i…
TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure
Cybersecurity researchers have called attention to a "massive campaign" that has systematically targeted cloud native environments to set up malicious infrastr…
Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication
Veeam has released security updates to address multiple flaws in its Backup & Replication software, including a "critical" issue that could result in remote co…
Debian 11: PgBouncer Moderate SQL Injection Risk DLA-4422-1 CVE-2025-12819
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2025-12819 Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 a…
Fedora 42: Addressing CVE Fixes for python-django 4.2 SQL Injection and DoS
Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL Fixes CVE-2025-64460: Potential denial-of-service vulnerability …
Fedora 42: Critical Fixes for SQL Injection & DoS in Python-Django 5
Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL Fixes CVE-2025-64460: Potential denial-of-service vulnerability …
Debian 11: DLA-4334-1 pgpool2 Important Auth Bypass CVE-2025-46801
An authentication bypass was found in n pgpool-II, the connection pool server and replication proxy for PostgreSQL. For Debian 11 bullseye, this problem has be…
Ubuntu 25.10: Critical Remote Code Execution Vulnerability USN-7824-1
Redis could be made to crash or run programs if it received specially crafted network traffic from an authenticated user.
Debian LTS: DLA-4180-1: pgbouncer security update
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2021-3539
Containerizing WordPress: Best Practices for Robust Security and Management
Keeping WordPress secure can be challenging, especially when considering Linux security concerns in a typical LAMP stack setup. Most WordPress security issues …
Debian LTS: DLA-3995-1: libpgjava Security Advisory Updates
Multiple vulnerabilities have been fixed in the PostgreSQL JDBC Driver. CVE-2022-31197