Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
debian-security-support, the Debian security support coverage checker, has been updated in jessie-security. This marks the end of life of the libqb package in …
An update that contains security fixes can now be installed.
An update that contains security fixes can now be installed.
Rich Mirch discovered that the pg_ctlcluster script didn't drop privileges when creating socket/statistics temporary directories, which could result in local p…
Rich Mirch discovered that the pg_ctlcluster script didn't drop privileges when creating socket/statistics temporary directories, which could result in local p…
An update that fixes one vulnerability is now available.
An update that fixes 6 vulnerabilities is now available.
An update that fixes 6 vulnerabilities is now available.
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API tokens,…
Important: postgresql16-pgvector security update
Important: postgresql18-pgvector security update
An issue has been found in pgextwlist, a Postgres extensions that implements extension whitelisting. The issue is related to substituting extension schemas or …
Fedora 44 has released an update for pgAdmin 4 to version 9.17, fixing various security vulnerabilities and enhancing features for PostgreSQL administration an…
Guillaume Winter discovered that pgextwlist, an extension for PostgreSQL implementing a whitelist mechanism for PostgreSQL extensions, was susceptible to SQL i…
Important: galera and mariadb11.8 security, bug fix, and enhancement update
Important: galera and mariadb11.8 security, bug fix, and enhancement update
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
Cybersecurity researchers have called attention to a "massive campaign" that has systematically targeted cloud native environments to set up malicious infrastr…
Veeam has released security updates to address multiple flaws in its Backup & Replication software, including a "critical" issue that could result in remote co…
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2025-12819 Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 a…
Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL Fixes CVE-2025-64460: Potential denial-of-service vulnerability …
Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL Fixes CVE-2025-64460: Potential denial-of-service vulnerability …
