Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2022-0190: python-django security upda
Potential SQL injection in QuerySet.annotate(), aggregate(), and extra() (CVE-2022-28346) Potential SQL injection via QuerySet.explain(**options) on PostgreSQL…
Debian: DSA-5101-1: libphp-adodb security upda
Emmet Leahy reported that libphp-adodb, a PHP database abstraction layer library, allows to inject values into a PostgreSQL connection string. Depending on how…
Mageia 2022-0056: php-adodb security upda
Security hotfix release addressing a critical vulnerability in PostgreSQL connections (CVE-2021-3850) Additional fixes: Fix usage of get_magic_* functions #619…
Fedora 35: pgbouncer 2021-761cda0b
Update to 1.16.1, per changes decribed at: http://www.pgbouncer.org/changelog.html#pgbouncer-116x Fixes multiple security vulnerabilities related to PostgreSQL…
Fedora 34: php-symfony4 2021-0294e8ca
**Version 4.4.35** (2021-11-24) * security **CVE-2021-41270** [Serializer] Use single quote to escape formulas (jderusse) * bug #44232 [Cache] fix connecting t…
Fedora 35: php-symfony4 2021-10fd47b3
**Version 4.4.35** (2021-11-24) * security **CVE-2021-41270** [Serializer] Use single quote to escape formulas (jderusse) * bug #44232 [Cache] fix connecting t…
RedHat: RHSA-2021-3980:01 Important: Red Hat OpenStack Platform 13
An update for redis is now available for Red Hat OpenStack Platform 13 (Queens). Red Hat Product Security has rated this update as having a security impact of …
RedHat: RHSA-2021-3971:01 Important: Red Hat OpenStack Platform 10
An update for redis is now available for Red Hat OpenStack Platform 10 (Newton). Red Hat Product Security has rated this update as having a security impact of …
A New vBulletin 0-Day RCE Vulnerability and Exploit Disclosed Publicly
A security researcher earlier today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulne…
RedHat: RHSA-2020-3005:01 Important: Red Hat Integration Debezium 1.1
An update for Debezium PostgreSQL connector is now available for Red Hat Integration. Red Hat Product Security has rated this update as having a security impac…
Fedora 31: php-horde-horde FEDORA-2020-1a968aeb
**horde 5.2.22** * [jan] SECURITY: Protect image processing service from rendering active SVG content within the browser. * [jan] SECURITY: Fix XSS vulnerabili…
RedHat: RHSA-2020-0801:01 Moderate: OpenShift Container Platform 3.
An update for openshift-enterprise-postgresql-apb is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this updat…
RedHat: RHSA-2020-0802:01 Moderate: OpenShift Container Platform 3.
An update for openshift-enterprise-mariadb-apb is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update a…
RedHat: RHSA-2020-0800:01 Moderate: OpenShift Container Platform 3.
An update for openshift-enterprise-mysql-apb is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as …
Mageia 2020-0033: phpmyadmin security upda
Updated phpmyadmin package fix security vulnerability: A SQL injection flaw has been discovered in the user accounts page. A malicious user could inject custo…
RedHat: RHSA-2019-3149:01 Important: OpenShift Container Platform
An update for logging-elasticsearch5-container is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update a…
RedHat: RHSA-2019-2858:01 Important: OpenShift Container Platform 4.1.18
An update for logging-elasticsearch5-container is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as…
Warning: Researcher Drops phpMyAdmin Zero-Day Affecting All Versions
A cybersecurity researcher recently published details and proof-of-concept for an unpatched zero-day vulnerability in phpMyAdmin'one of the most popular applic…