# pgbouncer security updates

Patch Radar has 25 security fixes for pgbouncer, closing 13 CVEs. The newest is DEBIAN-CVE-2026-107349 (1.26.1-1), released October 16, 2026.

- Web page: https://patchblox.com/security/product/linux/pgbouncer
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-107349](https://patchblox.com/security/data/fix/linux/debian-cve-2026-107349.md) | Oct 16, 2026 | Debian 14 1.26.1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-107350](https://patchblox.com/security/data/fix/linux/debian-cve-2026-107350.md) | Oct 16, 2026 | Debian 14 1.26.1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-107348](https://patchblox.com/security/data/fix/linux/debian-cve-2026-107348.md) | Oct 16, 2026 | Debian 14 1.26.1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-6668](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6668.md) | Oct 4, 2026 | Debian 14 1.26.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-19888](https://patchblox.com/security/data/fix/linux/debian-cve-2026-19888.md) | Oct 4, 2026 | Debian 14 1.26.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6669](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6669.md) | Oct 4, 2026 | Debian 14 1.26.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-6664](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6664.md) | May 27, 2026 | Debian 13.5 (trixie) 1.24.1-1+deb13u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6664](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6664.md) | May 27, 2026 | Debian 14 1.25.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6665](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6665.md) | May 27, 2026 | Debian 13.5 (trixie) 1.24.1-1+deb13u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6665](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6665.md) | May 27, 2026 | Debian 14 1.25.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6666](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6666.md) | May 27, 2026 | Debian 13.5 (trixie) 1.24.1-1+deb13u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6666](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6666.md) | May 27, 2026 | Debian 14 1.25.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6667](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6667.md) | May 27, 2026 | Debian 13.5 (trixie) 1.24.1-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-6667](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6667.md) | May 27, 2026 | Debian 14 1.25.2-1 | Routine | 1 | 0 |
| [DLA-4422-1](https://patchblox.com/security/data/fix/linux/dla-4422-1.md) | Dec 27, 2025 | Debian 11.6 (bullseye) 1.15.0-1+deb11u2 | High | 1 | 0 |
| [DEBIAN-CVE-2025-12819](https://patchblox.com/security/data/fix/linux/debian-cve-2025-12819.md) | Dec 3, 2025 | Debian 12.15 (bookworm) 1.18.0-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-12819](https://patchblox.com/security/data/fix/linux/debian-cve-2025-12819.md) | Dec 3, 2025 | Debian 13.5 (trixie) 1.24.1-1+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-12819](https://patchblox.com/security/data/fix/linux/debian-cve-2025-12819.md) | Dec 3, 2025 | Debian 14 1.25.1-1 | High | 1 | 0 |
| [DLA-4180-1](https://patchblox.com/security/data/fix/linux/dla-4180-1.md) | May 27, 2025 | Debian 11.6 (bullseye) 1.15.0-1+deb11u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-2291](https://patchblox.com/security/data/fix/linux/debian-cve-2025-2291.md) | Apr 16, 2025 | Debian 12.15 (bookworm) 1.18.0-1+deb12u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2025-2291](https://patchblox.com/security/data/fix/linux/debian-cve-2025-2291.md) | Apr 16, 2025 | Debian 13.5 (trixie) 1.24.1-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2025-2291](https://patchblox.com/security/data/fix/linux/debian-cve-2025-2291.md) | Apr 16, 2025 | Debian 14 1.24.1-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2021-3935](https://patchblox.com/security/data/fix/linux/debian-cve-2021-3935.md) | Nov 22, 2021 | Debian 12.15 (bookworm) 1.16.1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-3935](https://patchblox.com/security/data/fix/linux/debian-cve-2021-3935.md) | Nov 22, 2021 | Debian 13.5 (trixie) 1.16.1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-3935](https://patchblox.com/security/data/fix/linux/debian-cve-2021-3935.md) | Nov 22, 2021 | Debian 14 1.16.1-1 | High | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo