Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian 11: DLA-4240-1 important: redis DoS and remote code execution
Two issues were discovered in Redis, the key-value database: * CVE-2025-32023: An authenticated user may have used a specially-crafted string to trigger a stac…
Mageia 9: 2025-0186 moderate: MariaDB crash and DOS risks
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This ma…
Debian: DLA-4208-1 Critical: MariaDB 10.5 DoS and Data Access Issues
Vulnerabilities was discovered in MariaDB, a SQL database server compatible with MySQL. CVE-2025-30693
Ubuntu 25.04 & 24.04 LTS: MariaDB update addresses multiple issues
Several security issues were fixed in MariaDB.
Ubuntu 7520-2: PostgreSQL
PostgreSQL could be made to crash if it received specially crafted network traffic.
Ubuntu 7520-1: PostgreSQL
PostgreSQL could be made to crash if it received specially crafted network traffic.
Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse
Cybersecurity researchers are calling attention to a new Linux cryptojacking campaign that's targeting publicly accessible Redis servers.The malicious activity…
Mageia 9 Advisory MGASA-2025-0155: Critical PostgreSQL Encoding Threat
PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation. (CVE-2025-4207) References: - https://bugs.mage…
Debian 11: DLA-4162-1 critical: redis unlimited buffer overflow
Unlimited output buffer for unauthenticated clients has been fixed in the key¢''value database Redis. For Debian 11 bullseye, this problem has been fixed in ve…
Slackware 15.0: 2025-127-01 critical: mariadb security fix
New mariadb packages are available for Slackware 15.0 and -current to fix security issues.
Rocky Linux: RLEA-2024:2162 postgresql Security Advisories Updates
new module: postgresql:16
Ubuntu 25.04: USN-7479-1 critical: MySQL multiple security issues
Several security issues were fixed in MySQL.
Ubuntu 18.04 LTS USN-7315-2 critical: PostgreSQL arbitrary code execution
PostgreSQL could be made to execute arbitrary code if it received specially crafted input.
Debian LTS: DLA-4074-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the Mari…
Double Trouble: Urgent BeyondTrust & PostgreSQL Vulns Patched
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Double Trouble: Urgent Patches Needed for BeyondTrust and PostgreSQL Vulnerabilities
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Mageia 2025-0064: postgresql15 & postgresql13 Security Advisory Updates
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation. (CVE-2025-1094) References: - https://bugs.mageia.org/show_bug…
PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks
Threat actors who were behind the exploitation of a zero-day vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products in De…
Debian LTS: DLA-4052-1: postgresql-13 Security Advisory Updates
A security issue was discovered in the PostgreSQL database system. Under certain usage patterns, improper neutralization of quoting syntax could make it possib…
Mageia 2025-0033: redis Security Advisory Updates
Redis' Lua library commands may lead to remote code execution. (CVE-2024-46981) Redis allows denial-of-service due to malformed ACL selectors. (CVE-2024-51741)
Debian: DSA-5856-1: redis Security Advisory Updates
Two security issues were discovered in Redis, a persistent key-value database, which could result in the execution of arbitrary code or denial of service.
Fedora 40: redis 2025-72fd0442cc Security Advisory Updates
Redis 7.2.7 Released Mon 6 Jan 2025 12:30:00 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes (CVE-2024-46981) Lua script commands may le…
Rocky Linux: RLSA-2024:10787 postgresql Security Advisories Updates
Important: postgresql:15 security update
Rocky Linux: RLSA-2024:10788 postgresql Security Advisories Updates
Important: postgresql:16 security update