Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2023:1105-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
SUSE: 2023:1104-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
SUSE: 2023:1103-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
RedHat: RHSA-2023-1693:01 Moderate: postgresql security update
An update for postgresql is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderat…
Debian LTS: DLA-3361-1: redis security update
It was discovered that there was a potential remote denial of service vulnerability in redis, a popular key-value database. Authenticated users could have used…
Mageia 2023-0086: redis security update
Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Re…
Fedora 38: redis 2023-b0768fba7b
**Redis 7.0.9** - Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-25155**) Sp…
Fedora 36: redis 2023-7a98e2d545
**Redis 6.2.11** - Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-25155**) S…
Fedora 37: redis 2023-c685251667
**Redis 7.0.9** - Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-25155**) Sp…
RedHat: RHSA-2023-1102:01 Moderate: rh-mysql80-mysql security update
An update for rh-mysql80-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of…
Ubuntu 5906-1: PostgreSQL vulnerability
PostgreSQL could be made to expose sensitive information over the network.
Debian LTS: DLA-3337-1: mariadb-10.3 security update
A new MariaDB minor maintenance release 10.3.38 has been released. It includes fix for a major performance/memory consumption issue (MDEV-29988). For further d…
Fedora 37: community-mysql 2023-d332f0b6a3
**MySQL 8.0.32** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-32.html
Fedora 36: community-mysql 2023-e449235964
**MySQL 8.0.32** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-32.html
New Threat: Stealthy HeadCrab Malware Compromised Over 1,200 Redis Servers
At least 1,200 Redis database servers worldwide have been corralled into a botnet using an "elusive and severe threat" dubbed HeadCrab since early September 20…
Ubuntu 5823-3: MySQL regression
USN 5823-1 introduced a regression in MySQL.
Fedora 36: redis 2023-68ae37fca3
**Redis 6.2.10** Released Mon Jan 17 12:00:00 IST 2023 Upgrade urgency: MODERATE, a quick followup fix for a recently released 6.2.9. Bug Fixes * Revert the ch…
Fedora 37: redis 2023-fbfe7a6cfe
**Redis 7.0.8** Released Mon Jan 16 12:00:00 IDT 2023 Security Fixes: * (**CVE-2022-35977**) Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands c…
Ubuntu 5823-2: MySQL vulnerability
Several security issues were fixed in MySQL.
Ubuntu 5823-1: MySQL vulnerabilities
Several security issues were fixed in MySQL.
RedHat: RHSA-2023-0160:01 Moderate: rh-postgresql10-postgresql security and
An update for rh-postgresql10-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security…
RedHat: RHSA-2023-0113:01 Moderate: postgresql:10 security update
An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security imp…
Microsoft: Kubernetes Clusters Hacked in Malware Campaign via PostgreSQL
The Kinsing malware is now actively breaching Kubernetes clusters by leveraging known weaknesses in container images and misconfigured, exposed PostgreSQL cont…
Kinsing Crypto Malware Hits Kubernetes Clusters via Misconfigured PostgreSQL
The threat actors behind theKinsingcryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain initial access t…