-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 09 Jul 2025 17:34:58 +0800
Source: pgpool2
Binary: libpgpool-dev libpgpool2 libpgpool2-dbgsym pgpool2 pgpool2-dbgsym postgresql-15-pgpool2 postgresql-15-pgpool2-dbgsym
Architecture: amd64
Version: 4.3.5-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libpgpool-dev - pgpool control protocol library - headers
 libpgpool2 - pgpool control protocol library
 pgpool2    - connection pool server and replication proxy for PostgreSQL
 postgresql-15-pgpool2 - connection pool server and replication proxy for PostgreSQL - mod
Closes: 1081659 1106119
Changes:
 pgpool2 (4.3.5-1+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * CVE-2024-45624: incompatible policies may allow an unauthorized user to
     retrieve table data from query cache (Closes: #1081659)
   * CVE-2025-46801: authentication bypass by primary weakness vulnerability
     (Closes: #1106119)
Checksums-Sha1:
 4b8549fd9c27e44f9de04e018b803f43ea520a66 150944 libpgpool-dev_4.3.5-1+deb12u1_amd64.deb
 6ad4a0a74e946936e94f0e3c605fcfdf2ca60569 64328 libpgpool2-dbgsym_4.3.5-1+deb12u1_amd64.deb
 bd414fa827415dc32b6d440672200f9259f9880b 141340 libpgpool2_4.3.5-1+deb12u1_amd64.deb
 c95f4a3f0b48b86cb1b4d3673f79b9edab22ea76 1897584 pgpool2-dbgsym_4.3.5-1+deb12u1_amd64.deb
 c1baf43d784cb15f9bf76fe2f59fd110723be162 11023 pgpool2_4.3.5-1+deb12u1_amd64-buildd.buildinfo
 26a72fbb18a8b74171dd80b83adbeccd600a1aa1 1231256 pgpool2_4.3.5-1+deb12u1_amd64.deb
 5597adf3c8ac2eaa37e80e541d723264ed0526c4 50988 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_amd64.deb
 4a81a51f914070ea2516e7a73c1cc19264af5249 159932 postgresql-15-pgpool2_4.3.5-1+deb12u1_amd64.deb
Checksums-Sha256:
 8718e2fd642073d4782e649ef374711423d4a3f46a797dbb9b8648d264e903de 150944 libpgpool-dev_4.3.5-1+deb12u1_amd64.deb
 82d8e8bd6b21d0e56b57a9c7c5e8512412a185e1c15e729e87da5c5e44863c78 64328 libpgpool2-dbgsym_4.3.5-1+deb12u1_amd64.deb
 2490dc34bff0b6229e1a08839f4cbc5dfbe6cef566eb1acdd6ae86601d6b7339 141340 libpgpool2_4.3.5-1+deb12u1_amd64.deb
 47fc0f90570c3822accd1c750d779726c5be38cf7f9f22dd32b3c75361233d76 1897584 pgpool2-dbgsym_4.3.5-1+deb12u1_amd64.deb
 21ee0661a3c6de394ddd24e905f80ec84e9415b5021cef4e707678eeb087f1e7 11023 pgpool2_4.3.5-1+deb12u1_amd64-buildd.buildinfo
 ef1dfec42b0f834367f8a9e71ac83241bea57d0a70b5b765464b8e32e2ec822e 1231256 pgpool2_4.3.5-1+deb12u1_amd64.deb
 8f1f1274c7a9c9b37569563bcc0458910a24b8f399fea064f0447fdfae23a93c 50988 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_amd64.deb
 c2a6c0839f3754f5a57ef322993df647443bcd8dab92a823255172326f176f1d 159932 postgresql-15-pgpool2_4.3.5-1+deb12u1_amd64.deb
Files:
 63892f2633440231d51f5ab6a8fb27fd 150944 libdevel optional libpgpool-dev_4.3.5-1+deb12u1_amd64.deb
 d3d1ae7ddb5c5d1698727956f2ffa25e 64328 debug optional libpgpool2-dbgsym_4.3.5-1+deb12u1_amd64.deb
 be286f09e81d3e878a0d73a5041186a0 141340 libs optional libpgpool2_4.3.5-1+deb12u1_amd64.deb
 9dab36eb85ec7d97019936dd3d37ab7c 1897584 debug optional pgpool2-dbgsym_4.3.5-1+deb12u1_amd64.deb
 1ffa027bf88e23cfb69d3e99815f147f 11023 database optional pgpool2_4.3.5-1+deb12u1_amd64-buildd.buildinfo
 d3199fde375b89720641707e08745299 1231256 database optional pgpool2_4.3.5-1+deb12u1_amd64.deb
 a38b5368f4c4c4bfc7e802b4994824e2 50988 debug optional postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_amd64.deb
 9dd98f0972ba13e4cfa61841a779ee45 159932 database optional postgresql-15-pgpool2_4.3.5-1+deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=z/If
-----END PGP SIGNATURE-----