DSA-5076 h2database - security update

Read Time:26 Second

Security researchers of JFrog Security and Ismail Aydemir discovered two remote
code execution vulnerabilities in the H2 Java SQL database engine which can be
exploited through various attack vectors, most notably through the H2 Console
and by loading custom classes from remote servers through JNDI. The H2 console
is a developer tool and not required by any reverse-dependency in Debian. It
has been disabled in (old)stable releases. Database developers are advised to
use at least version 2.1.210-1, currently available in Debian unstable.

CISA Launches Playbook to Boost AI Cybersecurity Collaboration

Multi-Cloud Adoption Surges Amid Rising Security Concerns

Chinese PlugX Malware Deleted in Global Law Enforcement Operation

Illicit Crypto-Inflows Set to Top $51bn in a Year

Phishing False Alarm

Fortinet Confirms Critical Zero-Day Vulnerability in Firewalls

Secureworks Exposes North Korean Links to Fraudulent Crowdfunding

Microsoft Patches Eight Zero-Days to Start the Year

Microsoft: Happy 2025. Here’s 161 Security Updates

DSA-5076 h2database – security update

vaultwarden-1.32.7-2.el9

USN-7173-3: Linux kernel (Raspberry Pi) vulnerabilities

Multiple Vulnerabilities in Rsync Could Allow for Remote Code Execution

USN-7204-1: NeoMutt vulnerabilities

pam-u2f-1.3.1-1.el9

pam-u2f-1.3.1-1.fc40