Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining
Cybersecurity researchers have unpacked a new malware strain dubbed PG_MEM that's designed to mine cryptocurrency after brute-forcing their way into PostgreSQL…
Fedora 40: mysql8.0 2024-5d9dc19f2d Security Advisory Updates
MySQL 8.0.39 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-38.html https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-39.html
Ubuntu 6968-1: PostgreSQL Security Advisory Updates
PostgreSQL could execute arbitrary SQL functions as the superuser if it received a specially crafted SQL object.
Debian: DSA-5746-1: postgresql-13 Security Advisory Updates
Noah Misch discovered a race condition in the pg_dump tool included in PostgreSQL, which may result in privilege escalation. For the oldstable distribution (bu…
Debian: DSA-5745-1: postgresql-15 Security Advisory Updates
Noah Misch discovered a race condition in the pg_dump tool included in PostgreSQL, which may result in privilege escalation. For the stable distribution (bookw…
Gentoo: GLSA-202408-05: Redis: Security Advisory Updates
Multiple vulnerabilities have been discovered in Redis, the worst of which may lead to a denial of service or possible remote code execution.
Ubuntu 6934-1: MySQL Security Advisory Updates
Several security issues were fixed in MySQL.
Fedora 39: mariadb 2024-d61bffd77f Security Advisory Updates
MariaDB 10.5.25 & Galera 26.4.18 Release notes: https://mariadb.com/kb/en/mariadb-10-5-25-release-notes/
Ubuntu 6823-1: MySQL Security Advisory Updates
Several security issues were fixed in MySQL.
Fedora 40: mariadb10.11 2024-6ea93e629b Security Advisory Updates
MariaDB 10.11.8 & Galera 26.4.18 Release notes: https://mariadb.com/kb/en/mariadb-10-11-7-release-notes/ https://mariadb.com/kb/en/mariadb-10-11-8-release-note…
Ubuntu 6802-1: PostgreSQL Security Advisory Updates
PostgreSQL could be made to expose sensitive information.
Ubuntu 6801-1: PyMySQL Security Advisory Updates
PyMySQL could be vulnerable to SQL injection attacks.
PostgreSQL Security Vulns Allow for XSS, MFA Bypass
Two critical security vulnerabilities were found in pgAdmin, the open-source administration tool for PostgreSQL . The vulnerabilities assigned CVE-2024-4216 an…
Slackware: 2024-141-01: mariadb Security Advisory Update
New mariadb packages are available for Slackware 15.0 and -current to fix a security issue.
Gentoo: GLSA-202405-25: MariaDB: Security Advisory Updates
Multiple vulnerabilities have been discovered in MariaDB, the worst fo which can lead to arbitrary execution of code.
Debian LTS: DLA-3764-1: postgresql-11 security update
In the PostgreSQL database server, a late privilege drop in the REFRESH MATERIALIZED VIEW CONCURRENTLY command could allow an attacker to trick a user with hig…
Docker, Hadoop, Confluence, Redis at Risk of New Cryptomining Attack
A recent attack campaign targeted publicly accessible Docker , Hadoop , Confluence, and Redis deployments. The attackers exploited misconfigurations and known …
Ubuntu 6656-1: PostgreSQL vulnerability
PostgreSQL could be made to run arbitrary SQL.
Cryptocurrency Mining Migo Malware Attacks Linux Redis Servers
A new malware dubbed ''Migo'' that is targeting Linux Redis servers to mine cryptocurrency via a cryptojacking attack has been discovered. This campaign employ…
New Migo Malware Targeting Redis Servers for Cryptocurrency Mining
A novel malware campaign has been observed targeting Redis servers for initial access with the ultimate goal of mining cryptocurrency on compromised Linux host…
Mageia 2024-0043: postgresql15 and postgresql13 security update
The updated packages fix a security vulnerability: PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL. (CVE-2024-0985) Referenc…
Debian: DSA-5610-1: redis security update
Multiple security issues were discovered in Redis, a persistent key-value database, which could result in the execution of arbitrary code or ACL bypass.
SUSE: 2024:399-1 suse/rmt-mariadb Security Update
The container suse/rmt-mariadb was updated. The following patches have been included in this update:
SUSE: 2024:398-1 suse/rmt-mariadb-client Security Update
The container suse/rmt-mariadb-client was updated. The following patches have been included in this update: