NewApp Digest
search bot

data

PostgreSQL Flaws Expose Databases to Remote Code Execution and SQL Injection
Tech Optimizer
May 21, 2026

PostgreSQL Flaws Expose Databases to Remote Code Execution and SQL Injection

PostgreSQL has released versions 18.4, 17.10, 16.14, 15.18, and 14.23 to address 11 security vulnerabilities and over 60 bugs. The vulnerabilities affect PostgreSQL versions 14 through 18 and include issues such as remote code execution, SQL injection, and denial-of-service risks. Specific vulnerabilities include: - CVE-2026-6472: Missing authorization in CREATE TYPE allows query hijacking. - CVE-2026-6473: Integer wraparound leads to out-of-bounds writes and server crashes. - CVE-2026-6474: Format string issue leaks server memory. - CVE-2026-6475: Symlink attack allows overwriting arbitrary files. - CVE-2026-6476: SQL injection allows execution of arbitrary SQL as superuser. - CVE-2026-6477: Memory buffer overwrite via libpq lo_* functions. - CVE-2026-6478: Timing attack exposes MD5-hashed passwords. - CVE-2026-6479: SSL/GSS recursion flaw allows denial-of-service. - CVE-2026-6575: Buffer over-read leaks memory data (PostgreSQL 18 only). - CVE-2026-6637: Refint module enables stack overflow and SQL injection, leading to possible RCE. - CVE-2026-6638: SQL injection in REFRESH PUBLICATION via table names. Organizations are advised to upgrade to the latest versions, avoid MD5 password authentication, restrict privileges, audit extensions, and monitor for abnormal activity. PostgreSQL 14 will reach its end-of-life on November 12, 2026.
Google Health 5.0 rolling out with new stats widget on Android
AppWizard
May 21, 2026

Google Health 5.0 rolling out with new stats widget on Android

Google Health has started rolling out version 5.0 of the Fitbit app for Android devices, introducing a new homescreen Quick Access Widget that replaces the previous Steps widget. This widget can display up to six different metrics simultaneously and allows users to customize their interface by removing certain elements. It includes a heart icon for direct app access, quick navigation to the Health Coach feature, and indicates the last update time. The update also features a new Google Health icon, phasing out Fitbit branding for software, while Fitbit branding remains for hardware. Version 5.0 is necessary for setting up the upcoming Fitbit Air, with the rollout starting on May 19 and expected to be fully available by May 26.
Windows multi-monitor HDR bug: Why do your displays share the wrong calibration?
Winsage
May 20, 2026

Windows multi-monitor HDR bug: Why do your displays share the wrong calibration?

Windows has a bug that affects HDR calibration for multi-monitor setups, causing incorrect peak brightness data to be applied across different displays. This results in distorted colors and highlights, particularly impacting gaming experiences where games draw settings from Windows. The issue is suspected to be triggered by the device entering standby mode, waking from sleep, or physically swapping display cables. Microsoft has not officially recognized or fixed this problem, leaving users to manually check their display profiles or restart their systems as a workaround.
PostgreSQL backup tool gets some backup of its own after sole maintainer sounds alarm
Tech Optimizer
May 20, 2026

PostgreSQL backup tool gets some backup of its own after sole maintainer sounds alarm

A coalition of companies, including AWS, Percona, Supabase, pgEdge, and Tiger Data, has formed to support the maintenance of pgBackRest, an extension for the PostgreSQL database, after its long-time maintainer, David Steele, could no longer continue due to a lack of sponsorship following the acquisition of Crunchy Data by Snowflake. pgBackRest is a backup and restore solution for PostgreSQL, which is widely used by major cloud service providers. Steele had been seeking sponsorship to maintain the project but was unsuccessful, prompting concerns about its future. The coalition aims to provide stability and reduce reliance on a single sponsor by onboarding a new maintainer and seeking additional support. Percona's CEO emphasized the importance of collaboration to ensure the project's health for the community.
Your Nvidia drivers could be insecure, and you should update now
AppWizard
May 20, 2026

Your Nvidia drivers could be insecure, and you should update now

Nvidia has issued a security bulletin regarding vulnerabilities in its GPU drivers, urging users to update to the latest versions for products including GeForce, Quadro, and Tesla GPUs. Users with Nvidia GPU drivers older than version 596.36 are advised to update to protect against vulnerabilities related to kernel-mode driver issues and resource management, which include time-of-check/time-of-use vulnerabilities, improper GPU resource access, and driver-lock leaks. The potential risks include denial of service, privilege escalation, information disclosure, data tampering, and code execution, with Nvidia classifying these vulnerabilities as "High." Users can check their current driver version in the Nvidia Control Panel or the Nvidia App and should visit Nvidia's driver page to download the latest updates.
Android 17's Live Updates will be a boon for workout and travel apps
AppWizard
May 20, 2026

Android 17’s Live Updates will be a boon for workout and travel apps

Android 17 will introduce a new "Metric Style" notification template for Live Updates, enhancing user experience by allowing health, fitness, timers, and travel applications to present vital information more accessibly. The Metric Style template can showcase up to three distinct data points simultaneously on the Always-On Display, lock screen, and status bar, focusing on real-time raw data rather than milestones. It features three display modes: a glanceable view prioritizing the most relevant metric, an expanded view showing all metrics side-by-side, and a collapsed view condensing information into a single line. This standardization provides app developers with a reliable framework for delivering critical information directly on the lock screen and status bar. Google has not confirmed whether this feature will be included in the first stable Android 17 update or a subsequent QPR release.
Фанаты Minecraft тайно скопировали 24 терабайта данных с легендарного сервера 2b2t – архив миллиона блоков скоро раздадут через торрент
TrendTechie
May 20, 2026

Фанаты Minecraft тайно скопировали 24 терабайта данных с легендарного сервера 2b2t – архив миллиона блоков скоро раздадут через торрент

A group of Minecraft enthusiasts has completed a digital archaeology project, mapping and archiving the oldest anarchy server, 2b2t, resulting in 24 terabytes of data. This data will be released as a torrent in the coming weeks. The 2b2t server has been operational for 16 years and is known for its lack of rules and bans. The team successfully archived various areas of the server, including: - Overworld area of 1,024,000² blocks (December 25, 2025 – April 13, 2026) - Overworld area of 512,000² blocks (November 11, 2024 – December 12, 2024) - End area of 256,000² blocks (January 23, 2026 – February 15, 2026) - Nether area of 100,000² blocks (June 9, 2025 – June 14, 2025) The team plans to release high-resolution renders and data analysis tables alongside the archive. Open-source tools for the archive are available on GitHub, and updates can be followed via Discord and Patreon.
Search