Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2020-0365: postgresql security upda
It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authen…
Gentoo: GLSA-202008-17: Redis: Multiple vulnerabiliti
Multiple vulnerabilities have been found in Redis, the worst of which could result in the arbitrary execution of code.
Ubuntu 4472-1: PostgreSQL vulnerabiliti
Several security issues were fixed in PostgreSQL.
Mageia 2020-0345: mysql-connector-python security upda
Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connectors. Successful attacks require human i…
Debian LTS: DLA-2344-1: mongodb security upda
A denial of service vulnerability was discovered in mongodb, an object/document-oriented database, whereby a user authorized to perform database queries may is…
RedHat: RHSA-2020-3518:01 Important: rh-mysql80-mysql security upda
An update for rh-mysql80-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of…
RedHat: RHSA-2020-3285:01 Important: postgresql-jdbc security upda
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Im…
RedHat: RHSA-2020-3284:01 Important: postgresql-jdbc security upda
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Im…
RedHat: RHSA-2020-3286:01 Important: postgresql-jdbc security upda
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as havi…
RedHat: RHSA-2020-3283:01 Important: postgresql-jdbc security upda
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this upda…
Ubuntu 4441-1: MySQL vulnerabiliti
Several security issues were fixed in MySQL.
RedHat: RHSA-2020-3176:01 Important: postgresql-jdbc security upda
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Im…
Debian: DSA-4731-1: redis security upda
An integer overflow flaw leading to a stack-based buffer overflow was discovered in redis, a persistent key-value database. A remote attacker can use this flaw…
Mageia 2020-0284: mariadb security upda
Updated mariadb packages fix security vulnerabilities: Vulnerability in the MariaDB Client product of MariaDB (component: C API) Difficult to exploit vulnerabi…
Debian: DSA-4703-1: mysql-connector-java security upda
Three vulnerabilities have been found in the MySQL Connector/J JDBC driver. For the oldstable distribution (stretch), these problems have been fixed
Fedora 31: community-mysql FEDORA-2020-261c9ddd
**MySQL 8.0.20** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html CVEs fixed: CVE-2020-2759 CVE-2020-2761 CVE-2020-2762 CVE-2020…
Fedora 30: community-mysql FEDORA-2020-20ac7c92
**MySQL 8.0.20** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html CVEs fixed: CVE-2020-2759 CVE-2020-2761 CVE-2020-2762 CVE-2020…
Fedora 32: community-mysql FEDORA-2020-136dc824
**MySQL 8.0.20** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html CVEs fixed: CVE-2020-2759 CVE-2020-2761 CVE-2020-2762 CVE-2020…
Ubuntu 4350-1: MySQL vulnerabiliti
Several security issues were fixed in MySQL.
RedHat: RHSA-2020-0980:01 Moderate: rh-postgresql10-postgresql securi
An update for rh-postgresql10-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security…
Mageia 2020-0109: hiredis security upda
Updated hiredis packages fix security vulnerability: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because mal…
Fedora 31: hiredis FEDORA-2020-53a54ef9
Fix for CVE-2020-7105 hiredis: NULL pointer dereference in async.c and dict.c
Fedora 30: hiredis FEDORA-2020-f6cc7883
Fix for CVE-2020-7105 hiredis: NULL pointer dereference in async.c and dict.c
Mageia 2020-0095: postgresql security upda
Updated postgresql9.6 and postgresql11 packages fix security vulnerability: The ALTER ... DEPENDS ON EXTENSION sub-commands do not perform authorization check…