Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: DLA-4208-1 Critical: MariaDB 10.5 DoS and Data Access Issues
Vulnerabilities was discovered in MariaDB, a SQL database server compatible with MySQL. CVE-2025-30693
Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse
Cybersecurity researchers are calling attention to a new Linux cryptojacking campaign that's targeting publicly accessible Redis servers.The malicious activity…
Mageia 9 Advisory MGASA-2025-0155: Critical PostgreSQL Encoding Threat
PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation. (CVE-2025-4207) References: - https://bugs.mage…
Debian 11: DLA-4162-1 critical: redis unlimited buffer overflow
Unlimited output buffer for unauthenticated clients has been fixed in the key¢''value database Redis. For Debian 11 bullseye, this problem has been fixed in ve…
Ubuntu 18.04 LTS USN-7315-2 critical: PostgreSQL arbitrary code execution
PostgreSQL could be made to execute arbitrary code if it received specially crafted input.
Debian LTS: DLA-4074-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the Mari…
Double Trouble: Urgent BeyondTrust & PostgreSQL Vulns Patched
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Double Trouble: Urgent Patches Needed for BeyondTrust and PostgreSQL Vulnerabilities
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Mageia 2025-0064: postgresql15 & postgresql13 Security Advisory Updates
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation. (CVE-2025-1094) References: - https://bugs.mageia.org/show_bug…
PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks
Threat actors who were behind the exploitation of a zero-day vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products in De…
Mageia 2025-0033: redis Security Advisory Updates
Redis' Lua library commands may lead to remote code execution. (CVE-2024-46981) Redis allows denial-of-service due to malformed ACL selectors. (CVE-2024-51741)
Fedora 40: redis 2025-72fd0442cc Security Advisory Updates
Redis 7.2.7 Released Mon 6 Jan 2025 12:30:00 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes (CVE-2024-46981) Lua script commands may le…
Gentoo: GLSA-202412-12: PostgreSQL: Security Advisory Updates
Multiple vulnerabilities have been discovered in PostgreSQL, the worst of which could lead to arbitrary code execution.
Debian LTS: DLA-3973-1: redis Security Advisory Updates
Multiple vulnerabilities have been fixed in the key¢''value database Redis. CVE-2022-35977
Fedora 39: redis 2024-68f9c0741f Security Advisory Updates
Redis Community Edition 7.2.6 Released Wed 02 Oct 2024 20:17:04 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes CVE-2024-31449 Lua libra…
Debian LTS: DLA-3891-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
Debian LTS: DLA-3885-1: redis Security Advisory Updates
It was discovered that there were a number of issues in Redis, a popular key-value database: * CVE-2023-45145: On startup, Redis began listening on a Unix
New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining
Cybersecurity researchers have unpacked a new malware strain dubbed PG_MEM that's designed to mine cryptocurrency after brute-forcing their way into PostgreSQL…
Gentoo: GLSA-202408-05: Redis: Security Advisory Updates
Multiple vulnerabilities have been discovered in Redis, the worst of which may lead to a denial of service or possible remote code execution.
Ubuntu 6801-1: PyMySQL Security Advisory Updates
PyMySQL could be vulnerable to SQL injection attacks.
PostgreSQL Security Vulns Allow for XSS, MFA Bypass
Two critical security vulnerabilities were found in pgAdmin, the open-source administration tool for PostgreSQL . The vulnerabilities assigned CVE-2024-4216 an…
Gentoo: GLSA-202405-25: MariaDB: Security Advisory Updates
Multiple vulnerabilities have been discovered in MariaDB, the worst fo which can lead to arbitrary execution of code.
Docker, Hadoop, Confluence, Redis at Risk of New Cryptomining Attack
A recent attack campaign targeted publicly accessible Docker , Hadoop , Confluence, and Redis deployments. The attackers exploited misconfigurations and known …
Ubuntu 6656-1: PostgreSQL vulnerability
PostgreSQL could be made to run arbitrary SQL.