-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 09 Jul 2025 17:34:58 +0800
Source: pgpool2
Binary: libpgpool-dev libpgpool2 libpgpool2-dbgsym pgpool2 pgpool2-dbgsym postgresql-15-pgpool2 postgresql-15-pgpool2-dbgsym
Architecture: arm64
Version: 4.3.5-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libpgpool-dev - pgpool control protocol library - headers
 libpgpool2 - pgpool control protocol library
 pgpool2    - connection pool server and replication proxy for PostgreSQL
 postgresql-15-pgpool2 - connection pool server and replication proxy for PostgreSQL - mod
Closes: 1081659 1106119
Changes:
 pgpool2 (4.3.5-1+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * CVE-2024-45624: incompatible policies may allow an unauthorized user to
     retrieve table data from query cache (Closes: #1081659)
   * CVE-2025-46801: authentication bypass by primary weakness vulnerability
     (Closes: #1106119)
Checksums-Sha1:
 7b6f17dc05379f1c7ca01cffe40b1b02a794a51c 150512 libpgpool-dev_4.3.5-1+deb12u1_arm64.deb
 3d8cb4648677f7aa63931e99816a8cf37f307310 63956 libpgpool2-dbgsym_4.3.5-1+deb12u1_arm64.deb
 bc03a370006e10fc21a5bc0791544f6d42f7059d 140212 libpgpool2_4.3.5-1+deb12u1_arm64.deb
 f3e25b61d9025085602e952ee90df0b24d5800b4 1916260 pgpool2-dbgsym_4.3.5-1+deb12u1_arm64.deb
 4c3173ba96930beb79c63e23a9422c87bd3e3a88 11022 pgpool2_4.3.5-1+deb12u1_arm64-buildd.buildinfo
 1a7e7c4d7d11a9e7d7dec46bb32cba1001fa0c2e 1174348 pgpool2_4.3.5-1+deb12u1_arm64.deb
 77aee34cbc36364d635bb788f64ab015a5edf925 50208 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_arm64.deb
 1418ca432ea1547b67d35eac4db18be590e2b298 159084 postgresql-15-pgpool2_4.3.5-1+deb12u1_arm64.deb
Checksums-Sha256:
 d8f23dcf1f37f79eb0815e0a14ce3e79dd3f41190fe1dd26c8ce20e68fac74c7 150512 libpgpool-dev_4.3.5-1+deb12u1_arm64.deb
 f8ba4e99f32c95a48322db33839e76e3a9a350dd44491447c1df1fec8ca5a2b1 63956 libpgpool2-dbgsym_4.3.5-1+deb12u1_arm64.deb
 c1342e8351507143f7c183d5362aaf5998abce387373809e2b4602bbc3497fed 140212 libpgpool2_4.3.5-1+deb12u1_arm64.deb
 10e7f96704f6d9b4e6224c4125f6a86093e98194ed8a07a06104f48667b3ab05 1916260 pgpool2-dbgsym_4.3.5-1+deb12u1_arm64.deb
 60ffb3a483fb44d23641bf0239d22dd69fdcc4cb8b0a1001f537ba13c3490dcb 11022 pgpool2_4.3.5-1+deb12u1_arm64-buildd.buildinfo
 1deeac7b096691c85143d5cbf4444efad44c58ced7e6e43a68e2b301c356fb8f 1174348 pgpool2_4.3.5-1+deb12u1_arm64.deb
 080d4d08883159464d35cd0c88f89fe86df39b60e0dc7344aeb938a3bac2fb3d 50208 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_arm64.deb
 b783bbeba5cc72012c713984b971de47ed06b4ebeae8b1b20b74bc1c871a0729 159084 postgresql-15-pgpool2_4.3.5-1+deb12u1_arm64.deb
Files:
 8070e7d6f263dee5a4a2599ffa35115f 150512 libdevel optional libpgpool-dev_4.3.5-1+deb12u1_arm64.deb
 92899dc3345132bc94ef201dd1797b95 63956 debug optional libpgpool2-dbgsym_4.3.5-1+deb12u1_arm64.deb
 98d145e89e3a6c9771916bbc8be822a5 140212 libs optional libpgpool2_4.3.5-1+deb12u1_arm64.deb
 b956024eb0661d9037bd4c8003950667 1916260 debug optional pgpool2-dbgsym_4.3.5-1+deb12u1_arm64.deb
 20dd27bcea2ee80be79eba1b722a4d43 11022 database optional pgpool2_4.3.5-1+deb12u1_arm64-buildd.buildinfo
 be7b32b663ef2f08688693869dd0ca53 1174348 database optional pgpool2_4.3.5-1+deb12u1_arm64.deb
 782f2323c6d82e682fae013e6f498201 50208 debug optional postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_arm64.deb
 908eb5b92f6da402c38ec5ee7600a318 159084 database optional postgresql-15-pgpool2_4.3.5-1+deb12u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=txiD
-----END PGP SIGNATURE-----