Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
openSUSE: 2019:2685-1: moderate: postgres
An update that contains security fixes can now be installed.
SUSE: 2019:3212-1 moderate: postgres
An update that contains security fixes can now be installed.
Debian LTS: DLA-1994-1: postgresql-common security update
Rich Mirch discovered that the pg_ctlcluster script didn't drop privileges when creating socket/statistics temporary directories, which could result in local p…
Debian: DSA-4568-1: postgresql-common security update
Rich Mirch discovered that the pg_ctlcluster script didn't drop privileges when creating socket/statistics temporary directories, which could result in local p…
SUSE: 2019:2707-1 important: postgresql10
An update that fixes one vulnerability is now available.
SUSE: 2019:2687-1 moderate: mariadb-100
An update that fixes 6 vulnerabilities is now available.
SUSE: 2019:2461-1 moderate: mariadb
An update that fixes 6 vulnerabilities is now available.
Debian LTS pgextwlist Security Update DLA-4806-1 CVE-2023-39417
An issue has been found in pgextwlist, a Postgres extensions that implements extension whitelisting. The issue is related to substituting extension schemas or …
Fedora pgAdmin4 Critical Data Issues Remote Access 2026-f0550055a7
Fedora 44 has released an update for pgAdmin 4 to version 9.17, fixing various security vulnerabilities and enhancing features for PostgreSQL administration an…
Debian pgextwlist SQL Injection Risk Fix DSA-6385-1 CVE-2023-39417
Guillaume Winter discovered that pgextwlist, an extension for PostgreSQL implementing a whitelist mechanism for PostgreSQL extensions, was susceptible to SQL i…
Rocky Linux 10 Galera Important Security Update RLSA-2026-33412
Important: galera and mariadb11.8 security, bug fix, and enhancement update
Rocky Linux 10 RLSA-2026-33412 Important Arbitrary Code Exec for Galera
Important: galera and mariadb11.8 security, bug fix, and enhancement update
Fedora 44 Python-Django-Haystack Faces Critical Deserialization Risk
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
Fix Critical Deserialization Issue in Fedora 43 python-django-haystack
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure
Cybersecurity researchers have called attention to a "massive campaign" that has systematically targeted cloud native environments to set up malicious infrastr…
Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication
Veeam has released security updates to address multiple flaws in its Backup & Replication software, including a "critical" issue that could result in remote co…
Debian 11: PgBouncer Moderate SQL Injection Risk DLA-4422-1 CVE-2025-12819
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2025-12819 Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 a…
Fedora 42: Addressing CVE Fixes for python-django 4.2 SQL Injection and DoS
Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL Fixes CVE-2025-64460: Potential denial-of-service vulnerability …
Fedora 42: Critical Fixes for SQL Injection & DoS in Python-Django 5
Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL Fixes CVE-2025-64460: Potential denial-of-service vulnerability …
Debian 11: DLA-4334-1 pgpool2 Important Auth Bypass CVE-2025-46801
An authentication bypass was found in n pgpool-II, the connection pool server and replication proxy for PostgreSQL. For Debian 11 bullseye, this problem has be…
Ubuntu 25.10: Critical Remote Code Execution Vulnerability USN-7824-1
Redis could be made to crash or run programs if it received specially crafted network traffic from an authenticated user.
Fedora 42: python-socketio Critical RCE Fix FEDORA-2025-96c38634c7
Release 5.14.1 - 2025-10-02 Restore support for rediss:// URLs, and add support for valkeys:// as well Add support for Redis connections using unix sockets Rel…
Soco404: Linux Cryptomining Campaign Masquerades as 404 Error Pages
Let's talk about something that's been slipping under the radar: Soco404 . If you manage Linux systems in any capacity''or just spend time keeping production e…
Mageia 9: MGASA-2025-0179 moderate: php-adodb SQL injection risk
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a…