UBUNTU-CVE-2026-62268
[Unknown description]
- Update to 1.4.5
- Update to 2.0.0b22
Published Updated
PatchFirst · Latest vulnerabilities
borgbackup vulnerabilities
Vulnerabilities published for borgbackup in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 3
Archive spoofing vulnerability in borgbackup
borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an attacker to be able to: 1. insert files (with no additional headers) into backups and 2. gain write access to the repository. This vulnerability does not disclose plaintext to the attacker, nor does it affect the authenticity of existing archives. Creating plausible fake archives may be feasible for empty or small archives, but is unlikely for large archiv
- Update to 1.2.5
Published UpdatedCVE-2017-15914
Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.
- Update to 1.1.3
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.