Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Rocky Linux 10 pgvector Update Fixes Index Build Code Execution
Important: postgresql18-pgvector security update
Debian LTS pgextwlist Security Update DLA-4806-1 CVE-2023-39417
An issue has been found in pgextwlist, a Postgres extensions that implements extension whitelisting. The issue is related to substituting extension schemas or …
Fedora pgAdmin4 Critical Data Issues Remote Access 2026-f0550055a7
Fedora 44 has released an update for pgAdmin 4 to version 9.17, fixing various security vulnerabilities and enhancing features for PostgreSQL administration an…
Debian pgextwlist SQL Injection Risk Fix DSA-6385-1 CVE-2023-39417
Guillaume Winter discovered that pgextwlist, an extension for PostgreSQL implementing a whitelist mechanism for PostgreSQL extensions, was susceptible to SQL i…
TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure
Cybersecurity researchers have called attention to a "massive campaign" that has systematically targeted cloud native environments to set up malicious infrastr…
Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication
Veeam has released security updates to address multiple flaws in its Backup & Replication software, including a "critical" issue that could result in remote co…
Debian 11: PgBouncer Moderate SQL Injection Risk DLA-4422-1 CVE-2025-12819
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2025-12819 Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 a…
Fedora 42: Addressing CVE Fixes for python-django 4.2 SQL Injection and DoS
Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL Fixes CVE-2025-64460: Potential denial-of-service vulnerability …
Fedora 42: Critical Fixes for SQL Injection & DoS in Python-Django 5
Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL Fixes CVE-2025-64460: Potential denial-of-service vulnerability …
Debian 11: DLA-4334-1 pgpool2 Important Auth Bypass CVE-2025-46801
An authentication bypass was found in n pgpool-II, the connection pool server and replication proxy for PostgreSQL. For Debian 11 bullseye, this problem has be…
Ubuntu 25.10: Critical Remote Code Execution Vulnerability USN-7824-1
Redis could be made to crash or run programs if it received specially crafted network traffic from an authenticated user.
Debian LTS: DLA-4180-1: pgbouncer security update
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2021-3539
Containerizing WordPress: Best Practices for Robust Security and Management
Keeping WordPress secure can be challenging, especially when considering Linux security concerns in a typical LAMP stack setup. Most WordPress security issues …
Debian LTS: DLA-3995-1: libpgjava Security Advisory Updates
Multiple vulnerabilities have been fixed in the PostgreSQL JDBC Driver. CVE-2022-31197
Debian LTS: DLA-3993-1: pgpool2 Security Advisory Updates
Two vulnerabilities were discovered in pgpool2, a connection pool server and replication proxy for PostgreSQL. CVE-2023-22332
Debian LTS: DLA-3889-1: pymongo Security Advisory Updates
pymongo a python interface to the MongoDB document-oriented database was vulnerable. An out-of-bounds read in the 'bson' module allowed deserialization of
Debian LTS: DLA-3812-1: libpgjava Security Advisory Updates
A possible SQL injection vulnerability was found in libpgjava, the PostgreSQL JDBC Driver. It allows an attacker to inject SQL if using PreferQueryMode=SIMPLE …
Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution
The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating …
Multiple Flaws Found in ScrutisWeb Software Exposes ATMs to Remote Hacking
Four security vulnerabilities in the ScrutisWeb ATM fleet monitoring software made by Iagona could be exploited to remotely break into ATMs, upload arbitrary f…
New SkidMap Malware Attacking Wide Range of Linux Distributions
According to recent reports, there have been instances of threat actors using malware called ''SkidMap'' to exploit vulnerable Redis systems.
RedHat: RHSA-2022-7238:01 Important: Red Hat OpenStack Platform
An update for puppet-mysql is now available for Red Hat OpenStack Platform 13.0 (Queens), 16.1 (Train), 16.2 (Train) and 17.0 (Wallaby). Red Hat Product Securi…
Debian LTS: DLA-3140-1: libpgjava security update
It was discovered that there was a potential SQL injection vulnerability in libpgjava, a Java library for connecting to PostgreSQL databases.
Debian: DSA-5196-1: libpgjava security update
Several security vulnerabilities have been found in libpgjava, the official PostgreSQL JDBC Driver. CVE-2020-13692
Debian LTS: DLA-3018-1: libpgjava security upda
It was found that libpgjava, the official PostgreSQL JDBC Driver, would be vulnerable if an attacker controlled jdbc url or properties. The JDBC driver did not…