Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian 11 PostgreSQL 13 Multiple Issues Fixed DLA-4524-1 CVE-2026-2003
Multiple vulnerabilities were fixed in PostgreSQL, a popular database. CVE-2026-2003 Fix CVE-2026-2003: Improper validation of type "oidvector" in PostgreSQL a…
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads t…
Exploring Ubuntu 20 and MySQL 8 Uncovers Serious RLSA-2026-3945 Flaw
Important: postgresql16 security update
Ubuntu 18.04 LTS MongoDB Major Denial of Service Vulnerability USN-8064-1
Several security issues were fixed in MongoDB.
Debian postgresql-15 Important Security Flaw Memory Disclosure DSA-6132-1
Multiple security issues were discovered in PostgreSQL, which may result in memory disclosure or the execution of arbitrary code. For the oldstable distributio…
Ubuntu 20.04 LTS MySQL Critical Security Fix USN-8006-1 CVE-2025-53040
Several security issues were fixed in MySQL.
Fedora 42: Important Advisory for MariaDB 11.8.5 Remote Code Execution
MariaDB 11.8.5 Release notes: https://mariadb.com/docs/release-notes/community- server/11.8/11.8.5
Fedora 42: mysql8.4 Important CPU Threats CVE-2025-53040 2026-942d35ff10
MySQL 8.4.7 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html
Fedora 42: Critical Remote Code Exec Flaw in MariaDB 10.11.15 Found
MariaDB 10.11.15 Release notes: server/10.11/10.11.15
Fedora 43: mariadb10.11 Important Remote Code Execution 2026-39e035a84c
MariaDB 10.11.15 Release notes: https://mariadb.com/docs/release-notes/community- server/10.11/10.11.15
MongoDB 8.2: Memory Leak Risk CVE-2025-14847 Critical Exploit
MongoBleed, tracked as CVE-2025-14847, is a high-severity flaw in MongoDB that allows unauthenticated attackers to read small pieces of a server's memory. In s…
MongoBleed MongoDB Memory Leak Under Active Exploitation Distros Lag on Updates
MongoBleed, tracked as CVE-2025-14847, is a high-severity flaw in MongoDB that allows unauthenticated attackers to read small pieces of a server's memory. In s…
MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide
A recently disclosed security vulnerability in MongoDB has come under active exploitation in the wild, with over 87,000 potentially susceptible instances ident…
Debian LTS: postgresql-13 Critical DoS Integer Wraparound CVE-2025-12817
A couple of vulnerabilities were discovered in postgresql-13, the widely-popular database management system: CVE-2025-12817 Missing authorization in PostgreSQL…
Gentoo: redict, redis High Risk Multiple Vulnerabilities GLSA-202511-05
Multiple vulnerabilities have been discovered in redis and redict, the worst of which could lead to execution of arbitrary code.
Mageia 9: PostgreSQL Critical Create Privilege Issue MGASA-2025-0302
MGASA-2025-0302 - Updated postgresql15 & postgresql13 packages fix security vulnerabilities
Ubuntu 22.04 LTS: Important Redis Remote Code Execution Advisory USN-7824-3
Redis could be made to crash or run programs if it received specially crafted network traffic from an authenticated user.
Debian LTS 11: Redis Important RCE DoS Risks DLA-4325-1 CVE-2025-46817
Multiple vulnerabilities were discovered in Redis, a popular key/value database: * CVE-2025-46817: Fix an issue where an authenticated user could have
13-Year Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely
Redis has disclosed details of a maximum-severity security flaw in its in-memory database software that could result in remote code execution under certain cir…
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely
Redis has disclosed details of a maximum-severity security flaw in its in-memory database software that could result in remote code execution under certain cir…
Debian 11: postgresql-13 Critical Security Update DLA-4273-1
It was discovered that there were a number of vulnerabilities in postgresql-13, the widely-popular database management system: * CVE-2025-8713: The fix for CVE…
Mageia: Significant Security Patch Released for Redis MGASA-2025-0211
Updated redis packages to a more recent version to fix security vulnerabilities: Some vulnerabilities have been discovered and fixed. Please note this update i…
Debian 11: DLA-4240-1 important: redis DoS and remote code execution
Two issues were discovered in Redis, the key-value database: * CVE-2025-32023: An authenticated user may have used a specially-crafted string to trigger a stac…
Mageia 9: 2025-0186 moderate: MariaDB crash and DOS risks
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This ma…