Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
13-Year Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely
Redis has disclosed details of a maximum-severity security flaw in its in-memory database software that could result in remote code execution under certain cir…
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely
Redis has disclosed details of a maximum-severity security flaw in its in-memory database software that could result in remote code execution under certain cir…
Debian 11: postgresql-13 Critical Security Update DLA-4273-1
It was discovered that there were a number of vulnerabilities in postgresql-13, the widely-popular database management system: * CVE-2025-8713: The fix for CVE…
Mageia: Significant Security Patch Released for Redis MGASA-2025-0211
Updated redis packages to a more recent version to fix security vulnerabilities: Some vulnerabilities have been discovered and fixed. Please note this update i…
Debian 11: DLA-4240-1 important: redis DoS and remote code execution
Two issues were discovered in Redis, the key-value database: * CVE-2025-32023: An authenticated user may have used a specially-crafted string to trigger a stac…
Mageia 9: 2025-0186 moderate: MariaDB crash and DOS risks
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This ma…
Debian: DLA-4208-1 Critical: MariaDB 10.5 DoS and Data Access Issues
Vulnerabilities was discovered in MariaDB, a SQL database server compatible with MySQL. CVE-2025-30693
Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse
Cybersecurity researchers are calling attention to a new Linux cryptojacking campaign that's targeting publicly accessible Redis servers.The malicious activity…
Mageia 9 Advisory MGASA-2025-0155: Critical PostgreSQL Encoding Threat
PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation. (CVE-2025-4207) References: - https://bugs.mage…
Debian 11: DLA-4162-1 critical: redis unlimited buffer overflow
Unlimited output buffer for unauthenticated clients has been fixed in the key¢''value database Redis. For Debian 11 bullseye, this problem has been fixed in ve…
Ubuntu 18.04 LTS USN-7315-2 critical: PostgreSQL arbitrary code execution
PostgreSQL could be made to execute arbitrary code if it received specially crafted input.
Debian LTS: DLA-4074-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the Mari…
Double Trouble: Urgent BeyondTrust & PostgreSQL Vulns Patched
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Double Trouble: Urgent Patches Needed for BeyondTrust and PostgreSQL Vulnerabilities
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Mageia 2025-0064: postgresql15 & postgresql13 Security Advisory Updates
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation. (CVE-2025-1094) References: - https://bugs.mageia.org/show_bug…
PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks
Threat actors who were behind the exploitation of a zero-day vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products in De…
Mageia 2025-0033: redis Security Advisory Updates
Redis' Lua library commands may lead to remote code execution. (CVE-2024-46981) Redis allows denial-of-service due to malformed ACL selectors. (CVE-2024-51741)
Fedora 40: redis 2025-72fd0442cc Security Advisory Updates
Redis 7.2.7 Released Mon 6 Jan 2025 12:30:00 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes (CVE-2024-46981) Lua script commands may le…
Gentoo: GLSA-202412-12: PostgreSQL: Security Advisory Updates
Multiple vulnerabilities have been discovered in PostgreSQL, the worst of which could lead to arbitrary code execution.
Debian LTS: DLA-3973-1: redis Security Advisory Updates
Multiple vulnerabilities have been fixed in the key¢''value database Redis. CVE-2022-35977
Fedora 39: redis 2024-68f9c0741f Security Advisory Updates
Redis Community Edition 7.2.6 Released Wed 02 Oct 2024 20:17:04 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes CVE-2024-31449 Lua libra…
Debian LTS: DLA-3891-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
Debian LTS: DLA-3885-1: redis Security Advisory Updates
It was discovered that there were a number of issues in Redis, a popular key-value database: * CVE-2023-45145: On startup, Redis began listening on a Unix
AlmaLinux 9 PostgreSQL 15 Important SQL Security Threat CVE-2024-7348
postgresql:15 security update