-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 09 Jul 2025 17:34:58 +0800 Source: pgpool2 Binary: libpgpool-dev libpgpool2 libpgpool2-dbgsym pgpool2 pgpool2-dbgsym postgresql-15-pgpool2 postgresql-15-pgpool2-dbgsym Architecture: armel Version: 4.3.5-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Aron Xu Description: libpgpool-dev - pgpool control protocol library - headers libpgpool2 - pgpool control protocol library pgpool2 - connection pool server and replication proxy for PostgreSQL postgresql-15-pgpool2 - connection pool server and replication proxy for PostgreSQL - mod Closes: 1081659 1106119 Changes: pgpool2 (4.3.5-1+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2024-45624: incompatible policies may allow an unauthorized user to retrieve table data from query cache (Closes: #1081659) * CVE-2025-46801: authentication bypass by primary weakness vulnerability (Closes: #1106119) Checksums-Sha1: 5e4d237f9f477b2251c49b94de2356c3c4c7eae5 148100 libpgpool-dev_4.3.5-1+deb12u1_armel.deb e48aabecb7684900e467c0786d7d31f356aabf78 64320 libpgpool2-dbgsym_4.3.5-1+deb12u1_armel.deb 1716159ba7bc0efcb88d6fab160b0d3a1ff0cff5 139464 libpgpool2_4.3.5-1+deb12u1_armel.deb fa12daf36438d3a8a07169959440d4b6280bb8ac 1828868 pgpool2-dbgsym_4.3.5-1+deb12u1_armel.deb 347f4543c9fdc76dfc3af139e103723fb8b15a2f 10864 pgpool2_4.3.5-1+deb12u1_armel-buildd.buildinfo 5927fde1f8f7a52b4720afa2df272686df886d8f 1159144 pgpool2_4.3.5-1+deb12u1_armel.deb a8458fd0c4741e967f970dea8cd50e0d8fb43f86 49884 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_armel.deb 40f19f16eff549da75fead726c57edb4bce7d85e 160168 postgresql-15-pgpool2_4.3.5-1+deb12u1_armel.deb Checksums-Sha256: 8cf17ceb6a36e226c0df1fc2a0f47bafaa268a9b9df4e2cc42928af08d4a6c31 148100 libpgpool-dev_4.3.5-1+deb12u1_armel.deb 8a7a17269505b43dabddcbd799644b7ba7e4bbd2fb4414179a732bd439e53d96 64320 libpgpool2-dbgsym_4.3.5-1+deb12u1_armel.deb a3aacd49d56c2d930f3bb0bd9098915ec8b603cf782fe81579e50f5197bd1f32 139464 libpgpool2_4.3.5-1+deb12u1_armel.deb 4f1ac8cda6c4b3ae9f93b2ba6486b5af33cca97e183871d4c8ed071bbc9067ea 1828868 pgpool2-dbgsym_4.3.5-1+deb12u1_armel.deb deebaf0e2c59a4ef54002318b5defbaf3360eb6c5dccf62207eec06873c0dcef 10864 pgpool2_4.3.5-1+deb12u1_armel-buildd.buildinfo cb37c2d61301a020f32201c26ee7696a9547c05fa99e2ff450b3a95c7bae3118 1159144 pgpool2_4.3.5-1+deb12u1_armel.deb f7c23c230f60d491c583d7f09229cb8201e92822aeebfc607fc6f0e96d0a418f 49884 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_armel.deb b18496595b2e683d43515b0556c40e9ac7a5eb5f3bae32cd719f529a61e7d914 160168 postgresql-15-pgpool2_4.3.5-1+deb12u1_armel.deb Files: 904b081d95ba00bb17d93bbf6c23e325 148100 libdevel optional libpgpool-dev_4.3.5-1+deb12u1_armel.deb 3fa76523d632818ba0cec94ee1e8a6f7 64320 debug optional libpgpool2-dbgsym_4.3.5-1+deb12u1_armel.deb 016d305d9705a0dc3205125fa0bb29a0 139464 libs optional libpgpool2_4.3.5-1+deb12u1_armel.deb c072fe9ab5d688d5fd67f34295435313 1828868 debug optional pgpool2-dbgsym_4.3.5-1+deb12u1_armel.deb 8f86f9b60d5ea4c7de6b8fe95275215a 10864 database optional pgpool2_4.3.5-1+deb12u1_armel-buildd.buildinfo fa1f56f0ce7031d69c0f568a4c3e181d 1159144 database optional pgpool2_4.3.5-1+deb12u1_armel.deb 292fa10d9f80e9ea8d91c6f2f0d53f34 49884 debug optional postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_armel.deb 23cd7fddadf62efd0bc71f1bd6e648c1 160168 database optional postgresql-15-pgpool2_4.3.5-1+deb12u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmiUaJMACgkQOQKMdMnE H5ML6hAA3VVnKoge5YPQAPb5TZPodQ0U3rJ2cv2NM1UEtCWcxzLtE+CHhVX2vwOK M9kN9/2guM65Fj+pMYHf7DEGegEnty8P96kBeT7lL8Y3qpWnkaSF+QlZCKsg/ObX QEPA6fU4vwJ1xXOkkpU193ZdxTC4AoKMPxHHJjQhAA11UUUbSqIQHaJce8GU9DnY P8eeYGuGKNAg6AtYHmFp+fZR/wQXmoImrP/MOqqiTercr78ncHf0swSSudvxoxPx 9mXAL9DE086Om0O/8cqM9q6F8U34hrk9OMCGFrt87aMd2zg4Ziejnc16IvAt8mq9 dTU5gO5YFtq+gBytNy7Ke7q7+rcvTAjM/9RXE54bfdbd7xEEmXyRLQqzGXxicjDJ WQrSZH1ntaaIQJ4h19LA0uIdVnI9WuSgWMRbwwiO0VNA13EqCEIgQdobB7rnDo4y lx44kyIa9PjgmE4atcawqkxqIImK0qh+UFROJiJzHA1eK4aCT0VuBfNdwtOgDKoo pZMQ/sQNPENLl46lvRQZkhXYxYfN/rTLS1BqS6ox+6D7eUlPDYAuQQti696ttwec UoGB0wjHaGV6Y2n3VPS77N0yceW6USQjZTDnEUeJXgH8OTl2xCNjV4UdiPWR8TF7 wbteYH1iSjUAkhLPSHEo/IQ/yiAIswiOnBKpFkz4wLo6XiOqSQU= =Mgbn -----END PGP SIGNATURE-----