Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 53 articles for you...
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorymoderatesql injection

Mageia 9: MGASA-2025-0179 moderate: php-adodb SQL injection risk

ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. . MGASA-2025-0179 - Updated php-adodb packages fix security vulnerability Publication date: 08 Jun 2025 URL: https://advisories.mageia.org/MGASA-2025-0179.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-46337 ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9 - CVE-2025-46337. References: - https://bugs.mageia.org/show_bug.cgi?id=34339 - https://ubuntu.com/security/notices/USN-7530-1 - https://github.com/ADOdb/ADOdb/releases/tag/v5.22.9 - https://www.cve.org/CVERecord?id=CVE-2025-46337 SRPMS: - 9/core/php-adodb-5.22.9-1.mga9 . Caution notice for Mageia addressing a php-adodb vulnerability that permits SQL injection. It is suggested to upgrade to version 5.22.9 for best protection.. php adodb security, Mageia advisory, database vulnerability, SQL injection fix, security patch. . LinuxSecurity.com Team

Calendar%202 Jun 08, 2025 Mageia
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydenial of servicesecurity issue

Debian 11 DLA-4074-1 urgent: MariaDB Denial of Service vulnerability

A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the MariaDB server. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4074-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Otto Kekäläinen March 01, 2025 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : mariadb-10.5 Version : 1:10.5.28-0+deb11u1 CVE ID : CVE-2025-21490 A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the MariaDB server. This updates also includes bugfixes through the 10.5 maintenance branch, as detailed at: https://mariadb.com/docs/release-notes/community-server/old-releases/mariadb-10-5-series/mariadb-10-5-27-release-notes https://mariadb.com/docs/release-notes/community-server/old-releases/mariadb-10-5-series/mariadb-10-5-28-release-notes For Debian 11 bullseye, this problem has been fixed in version 1:10.5.28-0+deb11u1. We recommend that you upgrade your mariadb-10.5 packages. For the detailed security status of mariadb-10.5 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/mariadb-10.5 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . DLA-4074-2 security notice for PostgreSQL highlights a critical exploit; an immediate update is highly advised.. MariaDB Security, DoS Attack, Debian Advisory, SQL Database Protection. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 01, 2025 •Critical Debian LTS
Banner 4 1028x280 1708121825 1771600306
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryupdatesoftware patch

Oracle Linux 9 ELSA-2025-1742: PostgreSQL Important Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-1742 http://linux.oracle.com/errata/ELSA-2025-1742.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: postgresql-13.20-1.el9_5.x86_64.rpm postgresql-contrib-13.20-1.el9_5.x86_64.rpm postgresql-plperl-13.20-1.el9_5.x86_64.rpm postgresql-plpython3-13.20-1.el9_5.x86_64.rpm postgresql-pltcl-13.20-1.el9_5.x86_64.rpm postgresql-private-libs-13.20-1.el9_5.x86_64.rpm postgresql-server-13.20-1.el9_5.x86_64.rpm postgresql-upgrade-13.20-1.el9_5.x86_64.rpm postgresql-docs-13.20-1.el9_5.x86_64.rpm postgresql-private-devel-13.20-1.el9_5.x86_64.rpm postgresql-server-devel-13.20-1.el9_5.x86_64.rpm postgresql-static-13.20-1.el9_5.x86_64.rpm postgresql-test-13.20-1.el9_5.x86_64.rpm postgresql-test-rpm-macros-13.20-1.el9_5.noarch.rpm postgresql-upgrade-devel-13.20-1.el9_5.x86_64.rpm aarch64: postgresql-13.20-1.el9_5.aarch64.rpm postgresql-contrib-13.20-1.el9_5.aarch64.rpm postgresql-plperl-13.20-1.el9_5.aarch64.rpm postgresql-plpython3-13.20-1.el9_5.aarch64.rpm postgresql-pltcl-13.20-1.el9_5.aarch64.rpm postgresql-private-libs-13.20-1.el9_5.aarch64.rpm postgresql-server-13.20-1.el9_5.aarch64.rpm postgresql-upgrade-13.20-1.el9_5.aarch64.rpm postgresql-docs-13.20-1.el9_5.aarch64.rpm postgresql-private-devel-13.20-1.el9_5.aarch64.rpm postgresql-server-devel-13.20-1.el9_5.aarch64.rpm postgresql-static-13.20-1.el9_5.aarch64.rpm postgresql-test-13.20-1.el9_5.aarch64.rpm postgresql-test-rpm-macros-13.20-1.el9_5.noarch.rpm postgresql-upgrade-devel-13.20-1.el9_5.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//postgresql-13.20-1.el9_5.src.rpm Related CVEs: CVE-2025-1094 Description of changes: [13.18-1] - Update to 13.18 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux Security Advisory ELSA-2025-1754highlights critical patches for MariaDB along with identified vulnerabilities.. Oracle Linux, PostgreSQL Updates, Security Advisory, Database Protection, Risk Management. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 24, 2025 •Important Oracle
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorycritical issuevulnerability

openSUSE 15.6: SUSE-SU-2025:0635-1 important: postgresql16 security issue

An update that solves one vulnerability can now be installed.. # Security update for postgresql16 Announcement ID: SUSE-SU-2025:0635-1 Release Date: 2025-02-21T14:13:33Z Rating: important References: * bsc#1237093 Cross-References: * CVE-2025-1094 CVSS scores: * CVE-2025-1094 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-1094 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-1094 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql16 fixes the following issues: Upgrade to 16.8: * CVE-2025-1094: Harden PQescapeString and allied functions against invalidly- encoded input strings (bsc#1237093). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-635=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-635=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-635=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-635=1 openSUSE-SLE-15.6-2025-635=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql16-16.8-150600.16.15.1 * postgresql16-debugsource-16.8-150600.16.15.1 * postgresql16-debuginfo-16.8-150600.16.15.1 * SUSE Package Hub 15 15-SP6(aarch64 ppc64le s390x x86_64) * postgresql16-debuginfo-16.8-150600.16.15.1 * postgresql16-debugsource-16.8-150600.16.15.1 * postgresql16-test-16.8-150600.16.15.1 * postgresql16-llvmjit-16.8-150600.16.15.1 * postgresql16-llvmjit-debuginfo-16.8-150600.16.15.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql16-debuginfo-16.8-150600.16.15.1 * postgresql16-debugsource-16.8-150600.16.15.1 * postgresql16-contrib-16.8-150600.16.15.1 * postgresql16-pltcl-debuginfo-16.8-150600.16.15.1 * postgresql16-server-devel-debuginfo-16.8-150600.16.15.1 * postgresql16-plperl-16.8-150600.16.15.1 * postgresql16-plpython-16.8-150600.16.15.1 * postgresql16-server-debuginfo-16.8-150600.16.15.1 * postgresql16-server-devel-16.8-150600.16.15.1 * postgresql16-server-16.8-150600.16.15.1 * postgresql16-plpython-debuginfo-16.8-150600.16.15.1 * postgresql16-plperl-debuginfo-16.8-150600.16.15.1 * postgresql16-devel-16.8-150600.16.15.1 * postgresql16-pltcl-16.8-150600.16.15.1 * postgresql16-contrib-debuginfo-16.8-150600.16.15.1 * postgresql16-devel-debuginfo-16.8-150600.16.15.1 * Server Applications Module 15-SP6 (noarch) * postgresql16-docs-16.8-150600.16.15.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * postgresql16-debuginfo-16.8-150600.16.15.1 * postgresql16-server-16.8-150600.16.15.1 * postgresql16-devel-16.8-150600.16.15.1 * postgresql16-pltcl-16.8-150600.16.15.1 * postgresql16-llvmjit-devel-16.8-150600.16.15.1 * postgresql16-server-debuginfo-16.8-150600.16.15.1 * postgresql16-server-devel-16.8-150600.16.15.1 * postgresql16-plperl-debuginfo-16.8-150600.16.15.1 * postgresql16-devel-debuginfo-16.8-150600.16.15.1 * postgresql16-contrib-16.8-150600.16.15.1 * postgresql16-16.8-150600.16.15.1 * postgresql16-llvmjit-16.8-150600.16.15.1 * postgresql16-plperl-16.8-150600.16.15.1 * postgresql16-plpython-debuginfo-16.8-150600.16.15.1 *postgresql16-contrib-debuginfo-16.8-150600.16.15.1 * postgresql16-debugsource-16.8-150600.16.15.1 * postgresql16-test-16.8-150600.16.15.1 * postgresql16-server-devel-debuginfo-16.8-150600.16.15.1 * postgresql16-pltcl-debuginfo-16.8-150600.16.15.1 * postgresql16-plpython-16.8-150600.16.15.1 * postgresql16-llvmjit-debuginfo-16.8-150600.16.15.1 * openSUSE Leap 15.6 (noarch) * postgresql16-docs-16.8-150600.16.15.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1094.html * https://bugzilla.suse.com/show_bug.cgi?id=1237093 . A vital patch for mongoDB4 addresses a significant flaw to improve overall system reliability and protection.. PostgreSQL16 Update,SUSE Security,openSUSE Patch,Database Security,Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 21, 2025 •Important OpenSUSE
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorysoftware updatecritical threat

SUSE: 2024:3181-1 Important: PostgreSQL16 Critical Security Threat

* bsc#1229013 Cross-References: * CVE-2024-7348 . # Security update for postgresql16 Announcement ID: SUSE-SU-2024:3181-1 Rating: important References: * bsc#1229013 Cross-References: * CVE-2024-7348 CVSS scores: * CVE-2024-7348 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7348 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7348 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Software Development Kit 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql16 fixes the following issues: * Upgrade to 16.4 (bsc#1229013) * CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Software Development Kit 12 SP5 zypper in -t patch SUSE-SLE-SDK-12-SP5-2024-3181=1 * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-3181=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-3181=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-3181=1 ## Package List: * SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64) * postgresql16-server-devel-debuginfo-16.4-3.16.1 * postgresql16-devel-debuginfo-16.4-3.16.1 * postgresql16-server-devel-16.4-3.16.1 * postgresql16-devel-16.4-3.16.1 * SUSE Linux Enterprise High Performance Computing 12 SP5(aarch64 x86_64) * postgresql16-server-debuginfo-16.4-3.16.1 * postgresql16-plperl-16.4-3.16.1 * postgresql16-plpython-debuginfo-16.4-3.16.1 * postgresql16-debugsource-16.4-3.16.1 * postgresql16-plperl-debuginfo-16.4-3.16.1 * postgresql16-plpython-16.4-3.16.1 * postgresql16-contrib-16.4-3.16.1 * postgresql16-16.4-3.16.1 * postgresql16-debuginfo-16.4-3.16.1 * libecpg6-debuginfo-16.4-3.16.1 * postgresql16-pltcl-16.4-3.16.1 * postgresql16-pltcl-debuginfo-16.4-3.16.1 * libpq5-debuginfo-16.4-3.16.1 * postgresql16-contrib-debuginfo-16.4-3.16.1 * libecpg6-16.4-3.16.1 * postgresql16-server-16.4-3.16.1 * libpq5-16.4-3.16.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch) * postgresql16-docs-16.4-3.16.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64) * libpq5-32bit-16.4-3.16.1 * libecpg6-debuginfo-32bit-16.4-3.16.1 * libpq5-debuginfo-32bit-16.4-3.16.1 * libecpg6-32bit-16.4-3.16.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) * postgresql16-server-debuginfo-16.4-3.16.1 * postgresql16-plperl-16.4-3.16.1 * postgresql16-plpython-debuginfo-16.4-3.16.1 * postgresql16-debugsource-16.4-3.16.1 * postgresql16-plperl-debuginfo-16.4-3.16.1 * postgresql16-plpython-16.4-3.16.1 * postgresql16-contrib-16.4-3.16.1 * postgresql16-16.4-3.16.1 * postgresql16-debuginfo-16.4-3.16.1 * libecpg6-debuginfo-16.4-3.16.1 * postgresql16-pltcl-16.4-3.16.1 * postgresql16-pltcl-debuginfo-16.4-3.16.1 * libpq5-debuginfo-16.4-3.16.1 * postgresql16-contrib-debuginfo-16.4-3.16.1 * libecpg6-16.4-3.16.1 * postgresql16-server-16.4-3.16.1 * libpq5-16.4-3.16.1 * SUSE Linux Enterprise Server 12 SP5 (noarch) * postgresql16-docs-16.4-3.16.1 * SUSE Linux Enterprise Server 12 SP5 (s390x x86_64) * libpq5-32bit-16.4-3.16.1 * libecpg6-debuginfo-32bit-16.4-3.16.1 * libpq5-debuginfo-32bit-16.4-3.16.1 * libecpg6-32bit-16.4-3.16.1 *SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64) * postgresql16-server-debuginfo-16.4-3.16.1 * postgresql16-plperl-16.4-3.16.1 * postgresql16-plpython-debuginfo-16.4-3.16.1 * postgresql16-debugsource-16.4-3.16.1 * postgresql16-plperl-debuginfo-16.4-3.16.1 * postgresql16-plpython-16.4-3.16.1 * postgresql16-contrib-16.4-3.16.1 * postgresql16-16.4-3.16.1 * postgresql16-debuginfo-16.4-3.16.1 * libecpg6-debuginfo-16.4-3.16.1 * postgresql16-pltcl-16.4-3.16.1 * postgresql16-pltcl-debuginfo-16.4-3.16.1 * libpq5-debuginfo-16.4-3.16.1 * postgresql16-contrib-debuginfo-16.4-3.16.1 * libecpg6-16.4-3.16.1 * postgresql16-server-16.4-3.16.1 * libpq5-16.4-3.16.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch) * postgresql16-docs-16.4-3.16.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64) * libpq5-32bit-16.4-3.16.1 * libecpg6-debuginfo-32bit-16.4-3.16.1 * libpq5-debuginfo-32bit-16.4-3.16.1 * libecpg6-32bit-16.4-3.16.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7348.html * https://bugzilla.suse.com/show_bug.cgi?id=1229013 . This software patch resolves a significant vulnerability in the mysql8 module, mitigating risks proficiently.. PostgreSQL Security Update, SUSE Linux Update, Security Advisory, Database Threat, Software Patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 09, 2024 •Important SuSE
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorycritical fixdatabase security

Oracle Linux 8 ELSA-2024-6018 Critical: PostgreSQL Server Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2024-6018 http://linux.oracle.com/errata/ELSA-2024-6018.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: pgaudit-1.5.0-1.module+el8.9.0+90098+1560b6c2.x86_64.rpm pg_repack-1.4.6-3.module+el8.9.0+90098+1560b6c2.x86_64.rpm postgres-decoderbufs-0.10.0-2.module+el8.9.0+90098+1560b6c2.x86_64.rpm postgresql-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-contrib-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-docs-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-plperl-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-plpython3-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-pltcl-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-server-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-server-devel-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-static-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-test-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-test-rpm-macros-13.16-1.module+el8.10.0+90398+791f18a8.noarch.rpm postgresql-upgrade-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm postgresql-upgrade-devel-13.16-1.module+el8.10.0+90398+791f18a8.x86_64.rpm aarch64: pgaudit-1.5.0-1.module+el8.9.0+90098+1560b6c2.aarch64.rpm pg_repack-1.4.6-3.module+el8.9.0+90098+1560b6c2.aarch64.rpm postgres-decoderbufs-0.10.0-2.module+el8.9.0+90098+1560b6c2.aarch64.rpm postgresql-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-contrib-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-docs-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-plperl-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-plpython3-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-pltcl-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-server-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-server-devel-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-static-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-test-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-test-rpm-macros-13.16-1.module+el8.10.0+90398+791f18a8.noarch.rpm postgresql-upgrade-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm postgresql-upgrade-devel-13.16-1.module+el8.10.0+90398+791f18a8.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//pgaudit-1.5.0-1.module+el8.9.0+90098+1560b6c2.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//pg_repack-1.4.6-3.module+el8.9.0+90098+1560b6c2.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//postgres-decoderbufs-0.10.0-2.module+el8.9.0+90098+1560b6c2.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//postgresql-13.16-1.module+el8.10.0+90398+791f18a8.src.rpm Related CVEs: CVE-2024-7348 Description of changes: pgaudit pg_repack postgres-decoderbufs postgresql [13.16-1] - Update to 13.16 - Fix CVE-2024-7348 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux security notice ELSA-2024-6018 published, tackling updates for postgres and vital corrections for security flaws.. Oracle Linux, PostgreSQL Update, Critical Fixes, Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 02, 2024 •Critical Oracle
Banner 4 1028x280 1708121825 1771600306
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorysecurity issueSQL injection

Rocky Linux 8 RLSA-2024:1435 important: SQL injection in PostgreSQL JDBC

Important: postgresql-jdbc security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2024:1435", "synopsis": "Important: postgresql-jdbc security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for postgresql-jdbc.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.\n\nSecurity Fix(es):\n\n* PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2266523", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2266523", "description": ""}], "cves": [{"name": "CVE-2024-1597", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2024-1597", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2024-03-27T04:34:32.999941Z", "rpms": {"Rocky Linux 8": {"nvras": ["postgresql-jdbc-0:42.2.14-3.el8_9.noarch.rpm", "postgresql-jdbc-0:42.2.14-3.el8_9.src.rpm", "postgresql-jdbc-javadoc-0:42.2.14-3.el8_9.noarch.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Uncover the critical security patch for PostgreSQL JDBC pertaining to Rocky Linux 8 and examine its implications for vulnerabilities associated with SQL injection.. PostgreSQL JDBC Update, Rocky Linux Security, SQL Injection Threats, JDBC Driver Vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 27, 2024 •Important Rocky Linux
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorycritical updatesecurity patch

Oracle Linux 9 ELSA-2023-7890 important: MariaDB security patch

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-7785 https://linux.oracle.com/errata/ELSA-2023-7785.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: pgaudit-1.7.0-1.module+el9.2.0+21134+ceb95ed9.x86_64.rpm pg_repack-1.4.8-1.module+el9.2.0+21134+ceb95ed9.x86_64.rpm postgres-decoderbufs-1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9.x86_64.rpm postgresql-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-contrib-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-docs-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-plperl-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-plpython3-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-pltcl-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-private-devel-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-private-libs-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-server-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-server-devel-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-static-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-test-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-test-rpm-macros-15.5-1.module+el9.3.0+90103+1d024772.noarch.rpm postgresql-upgrade-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm postgresql-upgrade-devel-15.5-1.module+el9.3.0+90103+1d024772.x86_64.rpm aarch64: pgaudit-1.7.0-1.module+el9.2.0+21134+ceb95ed9.aarch64.rpm pg_repack-1.4.8-1.module+el9.2.0+21134+ceb95ed9.aarch64.rpm postgres-decoderbufs-1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9.aarch64.rpm postgresql-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-contrib-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-docs-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-plperl-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-plpython3-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-pltcl-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-private-devel-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-private-libs-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-server-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-server-devel-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-static-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-test-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-test-rpm-macros-15.5-1.module+el9.3.0+90103+1d024772.noarch.rpm postgresql-upgrade-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm postgresql-upgrade-devel-15.5-1.module+el9.3.0+90103+1d024772.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol9/SRPMS-updates//pgaudit-1.7.0-1.module+el9.2.0+21134+ceb95ed9.src.rpm https://oss.oracle.com:443/ol9/SRPMS-updates//pg_repack-1.4.8-1.module+el9.2.0+21134+ceb95ed9.src.rpm https://oss.oracle.com:443/ol9/SRPMS-updates//postgres-decoderbufs-1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9.src.rpm https://oss.oracle.com:443/ol9/SRPMS-updates//postgresql-15.5-1.module+el9.3.0+90103+1d024772.src.rpm Related CVEs: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 CVE-2023-39418 Description of changes: pgaudit pg_repack postgres-decoderbufs postgresql [15.5-1] - update to 15.5 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418 Resolves: RHEL-16100, RHEL-16124, RHEL-16139 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Keep informed about key PostgreSQL improvements in Oracle Linux 9 to bolster your defenses against advancing vulnerabilities.. Oracle Linux Update, PostgreSQL Security Patch, ELSA-2023-7785. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Dec 15, 2023 •Important Oracle
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics