May Linux Patch Wednesday

May Linux Patch Wednesday. A total of 1,638 vulnerabilities 474 in the Linux kernel. For comparison, in April there were 1,035 vulnerabilities a record!. And this time it turns out to be a record again, more than one and a half times higher! The acceleration is both impressive and alarming. But w...

GHSA-PMGP-Q838-FH9G vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6665 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6667 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-4463-8RVF-RJ9F vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-GC77-JRV9-6FJP vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6666 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6664 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6665 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-GC77-JRV9-6FJP vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6664 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6667 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-PMGP-Q838-FH9G vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-4463-8RVF-RJ9F vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6666 vulnerabilities

Vulnerabilities for packages: pgbouncer...

Astra Linux - уязвимость в pgbouncer

In PgBouncer, the untrusted search path in the authquery connection handler before version 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication through a malicious searchpath parameter in the StartupMessage...

Astra Linux - уязвимость в pgbouncer

In PgBouncer, a password can be used after it has expired due to the fact that the authquery does not take into account Postgres’s VALID UNTIL value. This allows an attacker to log in with a password that is already expired...

VulnCheck KEV: CVE-2026-6664

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet...