Поиск уязвимостей
Количество 79
Количество 79
ALT-PU-2026-8091
ALT-PU-2026-8091: package `postgresql15-1C` update to version 15.15-alt0.p10.5
ALT-PU-2026-7952
ALT-PU-2026-7952: package `postgresql14` update to version 14.23-alt0.p10.1
ALT-PU-2026-7949
ALT-PU-2026-7949: package `postgresql15` update to version 15.18-alt0.p10.1
ALT-PU-2026-7738
ALT-PU-2026-7738: package `postgresql14` update to version 14.23-alt1
ALT-PU-2026-7736
ALT-PU-2026-7736: package `postgresql15` update to version 15.18-alt1
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6478
PostgreSQL discloses MD5-hashed passwords via covert timing channel
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreS ...
ALT-PU-2026-7951
ALT-PU-2026-7951: package `postgresql16` update to version 16.14-alt0.p10.1
ALT-PU-2026-7740
ALT-PU-2026-7740: package `postgresql16` update to version 16.14-alt1
ALT-PU-2026-7953
ALT-PU-2026-7953: package `postgresql17` update to version 17.10-alt0.p10.1
ALT-PU-2026-7948
ALT-PU-2026-7948: package `postgresql17-1C` update to version 17.7-alt0.p11.7
ALT-PU-2026-7741
ALT-PU-2026-7741: package `postgresql17` update to version 17.10-alt1
ALT-PU-2026-7946
ALT-PU-2026-7946: package `postgresql18-1C` update to version 18.4-alt1
ALT-PU-2026-7739
ALT-PU-2026-7739: package `postgresql18` update to version 18.4-alt1
RLSA-2026:28208
Important: postgresql:13 security update
GHSA-r6v6-v5r9-3ggh
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
ELSA-2026-28208
ELSA-2026-28208: postgresql:13 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-8091 ALT-PU-2026-8091: package `postgresql15-1C` update to version 15.15-alt0.p10.5 | CVSS3: 8.8 | 5 месяцев назад | |
| ALT-PU-2026-7952 ALT-PU-2026-7952: package `postgresql14` update to version 14.23-alt0.p10.1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7949 ALT-PU-2026-7949: package `postgresql15` update to version 15.18-alt0.p10.1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7738 ALT-PU-2026-7738: package `postgresql14` update to version 14.23-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7736 ALT-PU-2026-7736: package `postgresql15` update to version 15.18-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
 | CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 8.2 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 8.2 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 8.2 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel | CVSS3: 6.5 | 1% Низкий | 6 месяцев назад |
| CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreS ... | CVSS3: 8.2 | 1% Низкий | 6 месяцев назад |
| ALT-PU-2026-7951 ALT-PU-2026-7951: package `postgresql16` update to version 16.14-alt0.p10.1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7740 ALT-PU-2026-7740: package `postgresql16` update to version 16.14-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7953 ALT-PU-2026-7953: package `postgresql17` update to version 17.10-alt0.p10.1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7948 ALT-PU-2026-7948: package `postgresql17-1C` update to version 17.7-alt0.p11.7 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7741 ALT-PU-2026-7741: package `postgresql17` update to version 17.10-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7946 ALT-PU-2026-7946: package `postgresql18-1C` update to version 18.4-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7739 ALT-PU-2026-7739: package `postgresql18` update to version 18.4-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
 | RLSA-2026:28208 Important: postgresql:13 security update | 1% Низкий | 5 месяцев назад | |
| GHSA-r6v6-v5r9-3ggh Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 6.5 | 1% Низкий | 6 месяцев назад |
| ELSA-2026-28208 ELSA-2026-28208: postgresql:13 security update (IMPORTANT) | 1% Низкий | 5 месяцев назад |
Уязвимостей на страницу