Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 4350-1: MySQL vulnerabiliti
Several security issues were fixed in MySQL.
RedHat: RHSA-2020-0980:01 Moderate: rh-postgresql10-postgresql securi
An update for rh-postgresql10-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security…
Mageia 2020-0109: hiredis security upda
Updated hiredis packages fix security vulnerability: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because mal…
Fedora 31: hiredis FEDORA-2020-53a54ef9
Fix for CVE-2020-7105 hiredis: NULL pointer dereference in async.c and dict.c
Fedora 30: hiredis FEDORA-2020-f6cc7883
Fix for CVE-2020-7105 hiredis: NULL pointer dereference in async.c and dict.c
Mageia 2020-0095: postgresql security upda
Updated postgresql9.6 and postgresql11 packages fix security vulnerability: The ALTER ... DEPENDS ON EXTENSION sub-commands do not perform authorization check…
Debian LTS: DLA-2105-1: postgresql-9.4 security upda
Tom Lane discovered that "ALTER ... DEPENDS ON EXTENSION" sub commands in the PostgreSQL database did not perform authorisation checks. For Debian 8 "Jessie", …
Debian: DSA-4623-1: postgresql-11 security upda
Tom Lane discovered that "ALTER ... DEPENDS ON EXTENSION" sub commands in the PostgreSQL database did not perform authorisation checks. For the stable distribu…
Debian: DSA-4622-1: postgresql-9.6 security upda
Tom Lane discovered that "ALTER ... DEPENDS ON EXTENSION" sub commands in the PostgreSQL database did not perform authorisation checks. For the oldstable distr…
Ubuntu 4250-2: MariaDB vulnerabili
MariaDB clients could be made to crash if they received specially crafted input.
Mageia 2020-0072: mariadb security upda
Updated MariaDB packages fix security vulnerabilities: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple pro…
Debian LTS: DLA-2083-1: hiredis security upda
It was discovered that there were a large number of NULL pointer dereferences due to unchecked return values from malloc and friends in hiredis, a minimalistic…
Ubuntu 4250-1: MySQL vulnerabiliti
Several security issues were fixed in MySQL.
Fedora 31: community-mysql FEDORA-2020-0ca47c5a
** MySQL 8.0.19 ** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-19.html
Fedora 30: community-mysql FEDORA-2020-cd9ec9d6
** MySQL 8.0.19 ** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-19.html
Fedora 31: community-mysql FEDORA-2019-08c70018
**MySQL 8.0.18** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html Security Advisory: https://www.oracle.com/security-alerts/cp…
Fedora 30: community-mysql FEDORA-2019-40ed49f4
**MySQL 8.0.18** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html Security Advisory: https://www.oracle.com/security-alerts/cp…
Ubuntu 4194-2: postgresql-common vulnerabili
postgresql-common could be made to create arbitrary directories.
Chrome Password Stealing Trojan Sends Passwords To Remote MongoDB Database
Researchers have found a new password stealer targeting Google Chrome. What's different about this Chrome Password Stealing Trojan is thatChrome Password Steal…
Mageia 2019-0335: mariadb security upda
Updated mariadb packages fix security vulnerabilities: A vulnerability in Server: Optimizer contains an easily exploitable vulnerability allows low privileged…
Ubuntu 4195-1: MySQL vulnerabiliti
Several security issues were fixed in MySQL.
Ubuntu 4194-1: postgresql-common vulnerability
postgresql-common could be made to create arbitrary directories.
Fedora 31: community-mysql FEDORA-2019-d40df38271
**MySQL 8.0.18** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html CVEs fixed: CVE-2019-2911 CVE-2019-2914 CVE-2019-2938 CVE-2019…
Fedora 30: community-mysql FEDORA-2019-48a0a07033
**MySQL 8.0.18** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html CVEs fixed: CVE-2019-2911 CVE-2019-2914 CVE-2019-2938 CVE-2019…