Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Stay Secure with the Latest Linux Advisories

Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 16.04 CUPS Critical Control Character Injection CVE-2026-34980

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 Snapd Critical Security Issues July 2026 USN-8579-1

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H900
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 25 articles for you...
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryimportantPostgreSQL

Oracle Linux 8 ELSA-2026-4024 PostgreSQL 13 Important Security Fix

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-4024 http://linux.oracle.com/errata/ELSA-2026-4024.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: pgaudit-1.5.0-1.module+el8.9.0+90098+1560b6c2.x86_64.rpm pg_repack-1.4.6-3.module+el8.9.0+90098+1560b6c2.x86_64.rpm postgres-decoderbufs-0.10.0-2.module+el8.9.0+90098+1560b6c2.x86_64.rpm postgresql-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-contrib-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-docs-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-plperl-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-plpython3-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-pltcl-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-server-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-server-devel-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-static-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-test-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-test-rpm-macros-13.23-2.module+el8.10.0+90833+a7c23b2e.noarch.rpm postgresql-upgrade-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm postgresql-upgrade-devel-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm aarch64: pgaudit-1.5.0-1.module+el8.9.0+90098+1560b6c2.aarch64.rpm pg_repack-1.4.6-3.module+el8.9.0+90098+1560b6c2.aarch64.rpm postgres-decoderbufs-0.10.0-2.module+el8.9.0+90098+1560b6c2.aarch64.rpm postgresql-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-contrib-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-docs-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-plperl-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-plpython3-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-pltcl-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-server-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-server-devel-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-static-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-test-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-test-rpm-macros-13.23-2.module+el8.10.0+90833+a7c23b2e.noarch.rpm postgresql-upgrade-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm postgresql-upgrade-devel-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/pgaudit-1.5.0-1.module+el8.9.0+90098+1560b6c2.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/pg_repack-1.4.6-3.module+el8.9.0+90098+1560b6c2.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/postgres-decoderbufs-0.10.0-2.module+el8.9.0+90098+1560b6c2.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/postgresql-13.23-2.module+el8.10.0+90833+a7c23b2e.src.rpm Related CVEs: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 Description of changes: pgaudit [1.5.0-1] - Update to version 1.5.0 Related: #1855776 [1.4.0-4] - Bump release for rebuild against libpq-12.1-3 [1.4.0-3] - BuildRequires libpq-devel [1.4.0-2] - BuildRequires postgresql-server-devel [1.4.0-1] - Update to 1.4.0 [1.3.1-1] - Update to 1.3.1 and apply patch for pgsql v12 compatibility [1.2.0-4] - SCLize the SPEC [1.2.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [1.2.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.2.0-1] - Initial RPM packaging for Fedora - Based on Devrim Gündüz's packaging for PostgreSQL RPM Repo pg_repack [1.4.6-3] - Release bump - enable gating [1.4.6-2] - Rebuild - Resolves:#1954442 [1.4.6-1] - Rebase to upstream release 1.4.6 [1.4.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1.4.5-1] - Initial packaging postgres-decoderbufs [0.10.0-2] - Release bump for rebuild against libpq-12.1-3 * Wed Oct 09 2019 Patrik Novotný

Calendar%202 Mar 10, 2026 •Important Oracle
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorybug fixpackage update

Mageia 9: mariadb Bug Fix Update Released for MGAA-2025-0096 Issue

MGAA-2025-0096 - Updated mariadb packages fix bugs. MGAA-2025-0096 - Updated mariadb packages fix bugs Publication date: 15 Nov 2025 URL: https://advisories.mageia.org/MGAA-2025-0096.html Type: bugfix Affected Mageia releases: 9 Description: This release brings many fixes in storage engines InnoDB and Aria It also has many fixes in replication and optimizer. For more details, see the long list in release notes. References: - https://bugs.mageia.org/show_bug.cgi?id=34744 - https://mariadb.com/docs/release-notes/community-server/11.4/11.4.9 - https://mariadb.com/docs/release-notes/community-server/11.4/11.4.8 SRPMS: - 9/core/mariadb-11.4.9-1.mga9 . Updated mariadb packages in Mageia address critical bugs in storage engines and replication.. Mageia MariaDB Update Bugfix Replication InnoDB. . Severity: Informational. LinuxSecurity.com Team

Calendar%202 Nov 15, 2025 •Informational Mageia
Banner 4 1028x280 1708121825 1771600306
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorymoderatedebian

Debian 11 DLA-4052-1 moderate: PostgreSQL 13 SQL Injection Threat

A security issue was discovered in the PostgreSQL database system. Under certain usage patterns, improper neutralization of quoting syntax could make it possible for an input provider to achieve SQL injection. . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4052-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Santiago Ruano Rincón February 13, 2025 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : postgresql-13 Version : 13.19-0+deb11u1 CVE ID : CVE-2025-1094 A security issue was discovered in the PostgreSQL database system. Under certain usage patterns, improper neutralization of quoting syntax could make it possible for an input provider to achieve SQL injection. For Debian 11 bullseye, this problem has been fixed in version 13.19-0+deb11u1. We recommend that you upgrade your postgresql-13 packages. For the detailed security status of postgresql-13 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/postgresql-13 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . This advisory highlights a critical SQL injection vulnerability in PostgreSQL affecting versions pre-15.2, urging immediate patching to ensure database security. PostgreSQL Security Updates, Debian LTS Advisory, Database SQL Injection. . LinuxSecurity.com Team

Calendar%202 Feb 13, 2025 Debian LTS
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorycritical threatdatabase issue

Rocky Linux 9 RLSA-2024:5999 Critical: PostgreSQL Security Update

Important: postgresql security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2024:5999", "synopsis": "Important: postgresql security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for postgresql.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "PostgreSQL is an advanced object-relational database management system (DBMS).\n\nSecurity Fix(es):\n\n* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [], "cves": [{"name": "CVE-2024-7348", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2024-7348", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2024-09-17T00:55:55.661497Z", "rpms": {"Rocky Linux 9": {"nvras": ["postgresql-0:13.16-1.el9_4.aarch64.rpm", "postgresql-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-0:13.16-1.el9_4.s390x.rpm", "postgresql-0:13.16-1.el9_4.src.rpm", "postgresql-0:13.16-1.el9_4.x86_64.rpm", "postgresql-contrib-0:13.16-1.el9_4.aarch64.rpm", "postgresql-contrib-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-contrib-0:13.16-1.el9_4.s390x.rpm", "postgresql-contrib-0:13.16-1.el9_4.x86_64.rpm", "postgresql-contrib-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-contrib-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-contrib-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-contrib-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-debuginfo-0:13.16-1.el9_4.s390x.rpm","postgresql-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-debugsource-0:13.16-1.el9_4.aarch64.rpm", "postgresql-debugsource-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-debugsource-0:13.16-1.el9_4.s390x.rpm", "postgresql-debugsource-0:13.16-1.el9_4.x86_64.rpm", "postgresql-docs-0:13.16-1.el9_4.aarch64.rpm", "postgresql-docs-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-docs-0:13.16-1.el9_4.s390x.rpm", "postgresql-docs-0:13.16-1.el9_4.x86_64.rpm", "postgresql-docs-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-docs-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-docs-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-docs-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-plperl-0:13.16-1.el9_4.aarch64.rpm", "postgresql-plperl-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-plperl-0:13.16-1.el9_4.s390x.rpm", "postgresql-plperl-0:13.16-1.el9_4.x86_64.rpm", "postgresql-plperl-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-plperl-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-plperl-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-plperl-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-plpython3-0:13.16-1.el9_4.aarch64.rpm", "postgresql-plpython3-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-plpython3-0:13.16-1.el9_4.s390x.rpm", "postgresql-plpython3-0:13.16-1.el9_4.x86_64.rpm", "postgresql-plpython3-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-plpython3-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-plpython3-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-plpython3-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-pltcl-0:13.16-1.el9_4.aarch64.rpm", "postgresql-pltcl-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-pltcl-0:13.16-1.el9_4.s390x.rpm", "postgresql-pltcl-0:13.16-1.el9_4.x86_64.rpm", "postgresql-pltcl-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-pltcl-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-pltcl-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-pltcl-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-private-devel-0:13.16-1.el9_4.aarch64.rpm","postgresql-private-devel-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-private-devel-0:13.16-1.el9_4.s390x.rpm", "postgresql-private-devel-0:13.16-1.el9_4.x86_64.rpm", "postgresql-private-libs-0:13.16-1.el9_4.aarch64.rpm", "postgresql-private-libs-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-private-libs-0:13.16-1.el9_4.s390x.rpm", "postgresql-private-libs-0:13.16-1.el9_4.x86_64.rpm", "postgresql-private-libs-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-private-libs-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-private-libs-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-private-libs-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-server-0:13.16-1.el9_4.aarch64.rpm", "postgresql-server-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-server-0:13.16-1.el9_4.s390x.rpm", "postgresql-server-0:13.16-1.el9_4.x86_64.rpm", "postgresql-server-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-server-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-server-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-server-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-server-devel-0:13.16-1.el9_4.aarch64.rpm", "postgresql-server-devel-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-server-devel-0:13.16-1.el9_4.s390x.rpm", "postgresql-server-devel-0:13.16-1.el9_4.x86_64.rpm", "postgresql-server-devel-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-server-devel-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-server-devel-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-server-devel-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-static-0:13.16-1.el9_4.aarch64.rpm", "postgresql-static-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-static-0:13.16-1.el9_4.s390x.rpm", "postgresql-static-0:13.16-1.el9_4.x86_64.rpm", "postgresql-test-0:13.16-1.el9_4.aarch64.rpm", "postgresql-test-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-test-0:13.16-1.el9_4.s390x.rpm", "postgresql-test-0:13.16-1.el9_4.x86_64.rpm", "postgresql-test-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-test-debuginfo-0:13.16-1.el9_4.ppc64le.rpm","postgresql-test-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-test-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-upgrade-0:13.16-1.el9_4.aarch64.rpm", "postgresql-upgrade-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-upgrade-0:13.16-1.el9_4.s390x.rpm", "postgresql-upgrade-0:13.16-1.el9_4.x86_64.rpm", "postgresql-upgrade-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-upgrade-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-upgrade-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-upgrade-debuginfo-0:13.16-1.el9_4.x86_64.rpm", "postgresql-upgrade-devel-0:13.16-1.el9_4.aarch64.rpm", "postgresql-upgrade-devel-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-upgrade-devel-0:13.16-1.el9_4.s390x.rpm", "postgresql-upgrade-devel-0:13.16-1.el9_4.x86_64.rpm", "postgresql-upgrade-devel-debuginfo-0:13.16-1.el9_4.aarch64.rpm", "postgresql-upgrade-devel-debuginfo-0:13.16-1.el9_4.ppc64le.rpm", "postgresql-upgrade-devel-debuginfo-0:13.16-1.el9_4.s390x.rpm", "postgresql-upgrade-devel-debuginfo-0:13.16-1.el9_4.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. AlmaLinux releases an essential MySQL security patch. Remain vigilant to safeguard against potential risks and weaknesses.. PostgreSQL Security Update, Rocky Linux Advisory, Database Security Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 17, 2024 •Important Rocky Linux
Banner 4 1028x280 1708121825 1771600306
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorysoftware patchcritical threat

Ubuntu: 6823-1 Critical: Multiple MySQL Security Issues Resolved

Several security issues were fixed in MySQL.. ========================================================================== Ubuntu Security Notice USN-6823-1 June 11, 2024 mysql-8.0 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in MySQL. Software Description: - mysql-8.0: MySQL database Details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.37 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.10, and Ubuntu 24.04 LTS. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-37.html https://www.oracle.com/security-alerts/cpuapr2024.html Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS mysql-server-8.0 8.0.37-0ubuntu0.24.04.1 Ubuntu 23.10 mysql-server-8.0 8.0.37-0ubuntu0.23.10.2 Ubuntu 22.04 LTS mysql-server-8.0 8.0.37-0ubuntu0.22.04.3 Ubuntu 20.04 LTS mysql-server-8.0 8.0.37-0ubuntu0.20.04.3 This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6823-1 CVE-2024-20994, CVE-2024-20998, CVE-2024-21000, CVE-2024-21008, CVE-2024-21009, CVE-2024-21013, CVE-2024-21047, CVE-2024-21054, CVE-2024-21060, CVE-2024-21062, CVE-2024-21069, CVE-2024-21087, CVE-2024-21096, CVE-2024-21102 Package Information: https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.37-0ubuntu0.24.04.1 https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.37-0ubuntu0.23.10.2 https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.37-0ubuntu0.20.04.3 . Ubuntu Security Notice USN-6823-1 highlights MySQL security issues and updates for effective threat management.. Ubuntu Security, MySQL Fixes, Software Updates, Security Patch, Database Security. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 11, 2024 •Critical Ubuntu
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorycriticaldebian

Debian 10: DLA-3764-1 Critical: PostgreSQL-11 Privilege Escalation

In the PostgreSQL database server, a late privilege drop in the REFRESH MATERIALIZED VIEW CONCURRENTLY command could allow an attacker to trick a user with higher privileges to run SQL commands. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3764-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk March 18, 2024 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : postgresql-11 Version : 11.22-0+deb10u2 CVE ID : CVE-2024-0985 In the PostgreSQL database server, a late privilege drop in the REFRESH MATERIALIZED VIEW CONCURRENTLY command could allow an attacker to trick a user with higher privileges to run SQL commands. For Debian 10 buster, this problem has been fixed in version 11.22-0+deb10u2. We recommend that you upgrade your postgresql-11 packages. For the detailed security status of postgresql-11 please refer to its security tracker page at: Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu Security Notice USN-5005-1 outlines a significant vulnerability patch in MySQL-8 essential for safeguarding data integrity.. PostgreSQL Security, Debian Updates, Privilege Fix, Database Threats. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 18, 2024 •Critical Debian LTS
Banner 4 1028x280 1708121825 1771600306
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian: DSA-5436-1 Critical Update for HSQLDB Script Injection Risk

Gregor Kopf of Secfault Security GmbH discovered that HSQLDB, a Java SQL database engine, allowed the execution of spurious scripting commands in .script and .log files. Hsqldb supports a "SCRIPT" keyword which is normally used to record the commands input by the database admin to output such a . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5436-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Markus Koschany June 21, 2023 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : hsqldb1.8.0 CVE ID : CVE-2023-1183 Gregor Kopf of Secfault Security GmbH discovered that HSQLDB, a Java SQL database engine, allowed the execution of spurious scripting commands in .script and .log files. Hsqldb supports a "SCRIPT" keyword which is normally used to record the commands input by the database admin to output such a script. In combination with LibreOffice, an attacker could craft an odb containing a "database/script" file which itself contained a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker. For the oldstable distribution (bullseye), this problem has been fixed in version 1.8.0.10+dfsg-10+deb11u1. For the stable distribution (bookworm), this problem has been fixed in version 1.8.0.10+dfsg-11+deb12u1. We recommend that you upgrade your hsqldb1.8.0 packages. For the detailed security status of hsqldb1.8.0 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/hsqldb1.8.0 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A crucial patch addressesHSQLDB weaknesses that allow harmful input execution, impacting Debian platforms.. HSQLDB Update, Debian Security, Script Injection, Database Issue, Security Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 21, 2023 •Critical Debian
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorymoderateupdate

Ubuntu 22.04 LTS USN-5537-1 Moderate: MySQL Security Flaws Resolved

Several security issues were fixed in MySQL.. =========================================================================Ubuntu Security Notice USN-5537-1 July 28, 2022 mysql-5.7, mysql-8.0 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in MySQL. Software Description: - mysql-8.0: MySQL database - mysql-5.7: MySQL database Details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.30 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Ubuntu 18.04 LTS has been updated to MySQL 5.7.39. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-39.html https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-30.html https://www.oracle.com/security-alerts/cpujul2022.html Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: mysql-server-8.0 8.0.30-0ubuntu0.22.04.1 Ubuntu 20.04 LTS: mysql-server-8.0 8.0.30-0ubuntu0.20.04.2 Ubuntu 18.04 LTS: mysql-server-5.7 5.7.39-0ubuntu0.18.04.2 This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5537-1 CVE-2022-21509, CVE-2022-21515, CVE-2022-21517, CVE-2022-21522, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21534, CVE-2022-21537, CVE-2022-21538, CVE-2022-21539, CVE-2022-21547, CVE-2022-21553, CVE-2022-21569 Package Information: https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.30-0ubuntu0.22.04.1 https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.30-0ubuntu0.20.04.2 https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.39-0ubuntu0.18.04.2 . Various vulnerabilities were resolved in MySQL for Ubuntu LTS releases. Make sure your system is up-to-date to maintain security.. MySQL Security, Ubuntu Update, Linux Database, MySQL Issues. . LinuxSecurity.com Team

Calendar%202 Jul 28, 2022 Ubuntu
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics