Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining
Cybersecurity researchers have unpacked a new malware strain dubbed PG_MEM that's designed to mine cryptocurrency after brute-forcing their way into PostgreSQL…
Gentoo: GLSA-202408-05: Redis: Security Advisory Updates
Multiple vulnerabilities have been discovered in Redis, the worst of which may lead to a denial of service or possible remote code execution.
Ubuntu 6801-1: PyMySQL Security Advisory Updates
PyMySQL could be vulnerable to SQL injection attacks.
PostgreSQL Security Vulns Allow for XSS, MFA Bypass
Two critical security vulnerabilities were found in pgAdmin, the open-source administration tool for PostgreSQL . The vulnerabilities assigned CVE-2024-4216 an…
Gentoo: GLSA-202405-25: MariaDB: Security Advisory Updates
Multiple vulnerabilities have been discovered in MariaDB, the worst fo which can lead to arbitrary execution of code.
Docker, Hadoop, Confluence, Redis at Risk of New Cryptomining Attack
A recent attack campaign targeted publicly accessible Docker , Hadoop , Confluence, and Redis deployments. The attackers exploited misconfigurations and known …
Ubuntu 6656-1: PostgreSQL vulnerability
PostgreSQL could be made to run arbitrary SQL.
Mageia 2024-0043: postgresql15 and postgresql13 security update
The updated packages fix a security vulnerability: PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL. (CVE-2024-0985) Referenc…
SUSE: 2024:399-1 suse/rmt-mariadb Security Update
The container suse/rmt-mariadb was updated. The following patches have been included in this update:
SUSE: 2024:398-1 suse/rmt-mariadb-client Security Update
The container suse/rmt-mariadb-client was updated. The following patches have been included in this update:
SUSE: 2024:394-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
SUSE: 2024:393-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
Ubuntu 6600-1: MariaDB vulnerabilities
Several security issues were fixed in MariaDB.
SUSE: 2024:282-1 suse/rmt-mariadb-client Security Update
The container suse/rmt-mariadb-client was updated. The following patches have been included in this update:
SUSE: 2024:266-1 suse/rmt-mariadb Security Update
The container suse/rmt-mariadb was updated. The following patches have been included in this update:
Ubuntu 6538-2: PostgreSQL vulnerabilities
Several security issues were fixed in PostgreSQL.
Ubuntu 6583-1: MySQL vulnerabilities
Several security issues were fixed in MySQL.
Fedora 37: redis 2023-0e9e7544df
**Redis 7.0.13** Released Wed 06 Sep 2023 15:00:00 IDT Upgrade urgency SECURITY: See security fixes below. Security Fixes * (**CVE-2023-41053**) Redis does not…
Fedora 38: redis 2023-03422cb8de
**Redis 7.0.13** Released Wed 06 Sep 2023 15:00:00 IDT Upgrade urgency SECURITY: See security fixes below. Security Fixes * (**CVE-2023-41053**) Redis does not…
Fedora 39: redis 2023-5a7cc198c2
**Redis 7.2.1** Released Wed 06 Sep 2023 15:00:00 IDT Upgrade urgency SECURITY: See security fixes below. Security Fixes * (**CVE-2023-41053**) Redis does not …
Ubuntu 6366-1: PostgreSQL vulnerability
PostgreSQL could be made to execute commands as the bootstrap superuser.
SUSE: 2023:2803-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
Mageia 2023-0246: redis security update
A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson and cmsgpack libraries, and result in heap corruption and potentiall…
SUSE: 2023:2735-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update: