https://sharedbuffers.com.br/en/tags/cve/Recent content in Cve on sharedbuffersHugoenTue, 07 Jul 2026 00:00:00 +0000https://sharedbuffers.com.br/en/posts/cve-2026-6478-postgresql-md5-timing/Tue, 07 Jul 2026 00:00:00 +0000https://sharedbuffers.com.br/en/posts/cve-2026-6478-postgresql-md5-timing/<!-- Translation notes: - "canal lateral de tempo" → "timing side channel" / "timing channel" (standard security term) - "verificador de senha" → "password verifier" (matches PostgreSQL docs terminology for rolpassword) - SQL CASE labels ('sem senha', 'MD5', 'SCRAM', 'outro') translated to English since they are display output, not stored data - "oráculo de tempo" → "timing oracle" (standard cryptanalysis term) - "legado" → "legacy" --> <br> <p>On May 14, 2026, PostgreSQL released security fixes for versions 18.4, 17.10, 16.14, 15.18, and 14.23. Among the vulnerabilities fixed is CVE-2026-6478, described by the project as a timing side channel in MD5 password comparison during authentication.</p>