Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 6060-1: MySQL vulnerabilities
Several security issues were fixed in MySQL.
SUSE: 2023:1357-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
Fedora 36: redis 2023-04239b5758
**Redis 6.2.12** Released Mon Apr 17 16:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-28856**) Aut…
Fedora 38: redis 2023-e4e3393396
**Redis 7.0.11** Released Mon Apr 17 16:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-28856**) Aut…
Fedora 37: redis 2023-5b6510a584
**Redis 7.0.11** Released Mon Apr 17 16:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-28856**) Aut…
Mageia 2023-0156: redis security update
Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access. (CVE-2023-28856) References: - https://bu…
Debian LTS: DLA-3396-1: redis security update
It was discovered that there was a potential remote denial of service vulnerability in Redis, a popular 'NoSQL' key-value database. Authenticated users could h…
SUSE: 2023:1227-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
Two Critical Flaws Found in Alibaba Cloud's PostgreSQL Databases
A chain of two critical flaws has been disclosed in Alibaba Cloud's ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL that could be exploited to breach…
SUSE: 2023:1105-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
SUSE: 2023:1104-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
SUSE: 2023:1103-1 suse/postgres Security Update
The container suse/postgres was updated. The following patches have been included in this update:
RedHat: RHSA-2023-1693:01 Moderate: postgresql security update
An update for postgresql is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderat…
Debian LTS: DLA-3361-1: redis security update
It was discovered that there was a potential remote denial of service vulnerability in redis, a popular key-value database. Authenticated users could have used…
Mageia 2023-0086: redis security update
Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Re…
Fedora 38: redis 2023-b0768fba7b
**Redis 7.0.9** - Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-25155**) Sp…
Fedora 36: redis 2023-7a98e2d545
**Redis 6.2.11** - Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-25155**) S…
Fedora 37: redis 2023-c685251667
**Redis 7.0.9** - Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2023-25155**) Sp…
RedHat: RHSA-2023-1102:01 Moderate: rh-mysql80-mysql security update
An update for rh-mysql80-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of…
Ubuntu 5906-1: PostgreSQL vulnerability
PostgreSQL could be made to expose sensitive information over the network.
Debian LTS: DLA-3337-1: mariadb-10.3 security update
A new MariaDB minor maintenance release 10.3.38 has been released. It includes fix for a major performance/memory consumption issue (MDEV-29988). For further d…
Fedora 37: community-mysql 2023-d332f0b6a3
**MySQL 8.0.32** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-32.html
Fedora 36: community-mysql 2023-e449235964
**MySQL 8.0.32** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-32.html
New Threat: Stealthy HeadCrab Malware Compromised Over 1,200 Redis Servers
At least 1,200 Redis database servers worldwide have been corralled into a botnet using an "elusive and severe threat" dubbed HeadCrab since early September 20…