May Linux Patch Wednesday

May Linux Patch Wednesday. A total of 1,638 vulnerabilities 474 in the Linux kernel. For comparison, in April there were 1,035 vulnerabilities a record!. And this time it turns out to be a record again, more than one and a half times higher! The acceleration is both impressive and alarming. But w...

CVE-2026-6665 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-PMGP-Q838-FH9G vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6667 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-4463-8RVF-RJ9F vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-GC77-JRV9-6FJP vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6666 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6664 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6665 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-GC77-JRV9-6FJP vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6664 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6667 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-PMGP-Q838-FH9G vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-4463-8RVF-RJ9F vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6666 vulnerabilities

Vulnerabilities for packages: pgbouncer...

Astra Linux - уязвимость в pgbouncer

In PgBouncer, the untrusted search path in the authquery connection handler before version 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication through a malicious searchpath parameter in the StartupMessage...

Astra Linux - уязвимость в pgbouncer

When PgBouncer is configured to use “cert” authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1...

Astra Linux - уязвимость в pgbouncer

In PgBouncer, a password can be used after it has expired due to the fact that the authquery does not take into account Postgres’s VALID UNTIL value. This allows an attacker to log in with a password that is already expired...