Astra Linux – Vulnerability in pgbouncer

When PgBouncer is configured to use “cert” authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1...

May Linux Patch Wednesday

May Linux Patch Wednesday. A total of 1,638 vulnerabilities 474 in the Linux kernel. For comparison, in April there were 1,035 vulnerabilities a record!. And this time it turns out to be a record again, more than one and a half times higher! The acceleration is both impressive and alarming. But w...

GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-GC77-JRV9-6FJP vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6666 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6665 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6664 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-PMGP-Q838-FH9G vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-4463-8RVF-RJ9F vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6667 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-PMGP-Q838-FH9G vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-4463-8RVF-RJ9F vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6666 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6664 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-GC77-JRV9-6FJP vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6667 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6665 vulnerabilities

Vulnerabilities for packages: pgbouncer...

VulnCheck KEV: CVE-2026-6664

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet...

CLEANSTART-2026-DL78780 Security fixes for CVE-2026-6664, CVE-2026-6665, CVE-2026-6666, CVE-2026-6667 applied in versions: 1.16.1-r0, 1.25.1-r0

Multiple security vulnerabilities affect the pgbouncer package. These issues are resolved in later releases. See references for individual vulnerability details...