TrustList daily digest · Tech and security
Sunday, 18 October 2026
Tech and security: the stories TrustList published on this day, each in a line of our own. Open a story for the whole piece and its sources.
Tech and security2
1Security advisories
PgBouncer 1.26.1 fixes a SCRAM login bypass and two hang bugs
A user who knows one SCRAM password can log in as any other SCRAM user, superusers included, on PgBouncer 1.17.0 to 1.26.0. Two further flaws let unauthenticated clients hang the pooler under specific settings.
2Security advisories
psqlODBC 18.00.0005 fixes heap corruption from oversized parameter lists
Every release from 08.01.0102 to 18.00.0004 is affected. An application that builds IN lists from user input can be crashed, or left running on a corrupted heap.
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.