ROS-20260714-73-0050

The vulnerability of the strlcat function in PostgreSQL PgBouncer software-related connectivity libraries is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...

ROS-20260713-73-0045

The vulnerability of the mbufgetbytes and mbufgetchars functions in PostgreSQL’s PgBouncer connection pool lies in integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted authentication packet called SCRAM...

May Linux Patch Wednesday

May Linux Patch Wednesday. A total of 1,638 vulnerabilities 474 in the Linux kernel. For comparison, in April there were 1,035 vulnerabilities a record!. And this time it turns out to be a record again, more than one and a half times higher! The acceleration is both impressive and alarming. But w...

GHSA-PMGP-Q838-FH9G vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6667 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6664 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-GC77-JRV9-6FJP vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-4463-8RVF-RJ9F vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6665 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6666 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6667 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6666 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6665 vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-PMGP-Q838-FH9G vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-GC77-JRV9-6FJP vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-4463-8RVF-RJ9F vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-6664 vulnerabilities

Vulnerabilities for packages: pgbouncer...

Astra Linux – Vulnerability in pgbouncer

When PgBouncer is configured to use “cert” authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1...