-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 09 Jul 2025 17:34:58 +0800 Source: pgpool2 Binary: libpgpool-dev libpgpool2 libpgpool2-dbgsym pgpool2 pgpool2-dbgsym postgresql-15-pgpool2 postgresql-15-pgpool2-dbgsym Architecture: mips64el Version: 4.3.5-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Aron Xu Description: libpgpool-dev - pgpool control protocol library - headers libpgpool2 - pgpool control protocol library pgpool2 - connection pool server and replication proxy for PostgreSQL postgresql-15-pgpool2 - connection pool server and replication proxy for PostgreSQL - mod Closes: 1081659 1106119 Changes: pgpool2 (4.3.5-1+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2024-45624: incompatible policies may allow an unauthorized user to retrieve table data from query cache (Closes: #1081659) * CVE-2025-46801: authentication bypass by primary weakness vulnerability (Closes: #1106119) Checksums-Sha1: b86b2929e131f8a6845e3add8e0ae3a6492114be 152988 libpgpool-dev_4.3.5-1+deb12u1_mips64el.deb de3923353f5dd68a1a9ecfaf7e30418e76d5ceee 67116 libpgpool2-dbgsym_4.3.5-1+deb12u1_mips64el.deb 361a2f18bc76a00937bdee7867348c6c16f49d94 139652 libpgpool2_4.3.5-1+deb12u1_mips64el.deb b9ba33e7a65e7cfed33a9f7c168dd490fb1a9a4a 2040568 pgpool2-dbgsym_4.3.5-1+deb12u1_mips64el.deb 2575906e78bfa49a215f6c004e3a6c0cb565303a 10872 pgpool2_4.3.5-1+deb12u1_mips64el-buildd.buildinfo 2168789f105c142f449e0e47740c260c87154cad 1166104 pgpool2_4.3.5-1+deb12u1_mips64el.deb 9969b3383e4e7346f329ba4e5c97537bd1b5b078 51320 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_mips64el.deb b5618551c9693d8e1d359237dc82072f354070cb 158480 postgresql-15-pgpool2_4.3.5-1+deb12u1_mips64el.deb Checksums-Sha256: 7febd7f8eba8389daf0ff847687d7eaaa95813d4a6a4447fd0ecb08cfdf8b132 152988 libpgpool-dev_4.3.5-1+deb12u1_mips64el.deb 7c6ffff263e75a644a10403767dbeeff676201c4870e6ea7be8164e2a4708524 67116 libpgpool2-dbgsym_4.3.5-1+deb12u1_mips64el.deb 85600db3a74cd110d8cfdef0744954bc3615fb862e41ebf79bbd609da5e7213a 139652 libpgpool2_4.3.5-1+deb12u1_mips64el.deb bf38f706d942cc4731791f3236ee010a6da20636d490f7775f97f1cfbe5e04b4 2040568 pgpool2-dbgsym_4.3.5-1+deb12u1_mips64el.deb 7a387b20408f712e86ec031b4807aa2592bd4a720417206a4b9c6ba9ba823c60 10872 pgpool2_4.3.5-1+deb12u1_mips64el-buildd.buildinfo a0cb5383a169bcde23c1a30bf92a3f04734d637026221327e0e0757a4a31b53e 1166104 pgpool2_4.3.5-1+deb12u1_mips64el.deb ef8fc5af243d4f2bb19ef006fdd0572c802037905d46e733acada8b98d207670 51320 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_mips64el.deb 605901f534bf5190334a942f522b762b5f9fda5f519a237361c7c2b78ae39f5d 158480 postgresql-15-pgpool2_4.3.5-1+deb12u1_mips64el.deb Files: 8c95336674130cca3b9afdec6a242c13 152988 libdevel optional libpgpool-dev_4.3.5-1+deb12u1_mips64el.deb 94dd4d66b21c6124c8b5327906eb25f8 67116 debug optional libpgpool2-dbgsym_4.3.5-1+deb12u1_mips64el.deb e4baf4721f4dcb511ac3f80d61646e23 139652 libs optional libpgpool2_4.3.5-1+deb12u1_mips64el.deb cd1e0b1277ee4eb5bbb13aa0645888f9 2040568 debug optional pgpool2-dbgsym_4.3.5-1+deb12u1_mips64el.deb 26ed60c515e95b33bcd679e7c53b8a91 10872 database optional pgpool2_4.3.5-1+deb12u1_mips64el-buildd.buildinfo fb22e5bc1271bc124e398bbbf6b7854c 1166104 database optional pgpool2_4.3.5-1+deb12u1_mips64el.deb 9d4d3a8d671b6196a144ca0288849b8a 51320 debug optional postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_mips64el.deb ad1ae1563b1de3b2df91dad853886ee9 158480 database optional postgresql-15-pgpool2_4.3.5-1+deb12u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEesE3YcWKZXIkRPMemf85J+x5/aoFAmiUaf0ACgkQmf85J+x5 /arDPA//Y20vDXbiCLgoNA937jUMLzf3+7okjIMmQ7/xVzxipxBGcWYl43e3iw8J ZgPEIWxqO5Q4VpRwQ6K/X2XJf6ZfGzwuCE2xfymyfDl/26KKulgbZCqx8iCszVOl DkFUqGOCog9wRA6ZPCVp3kl9X/EzHy06bpVMQW216v6OFX4fvrE5UOtZwl4gIkGI R6kBePDxGaFiGRTV4kImpBwlBqqhAceS08vd3yD5M0EX7APJZcipi6Fuwm4Ixuup ZB7gUwHx5EhgWpFHsNleU06NZI6R84ZEBp6pxsAOhYDQ4aROr1u/ryUmWuSMorez Rkfsik5xP704HGBpHbndYZe6NHUrWmFBGNtqyqdvLchR1LYPYvmHnfGj28so6Qxi WZ+etFvq0DKDFdZEQiHKQnsOWerGR4CRljfjZ8wZxz9s1nodxTVbgAFI18vokgYc 8LW3QwMN4FJTK7QZIC08ShqTTya9cvbWlyIyxs7gIEOe0YZJNceNxcucX49eFiqD 0Bo9OutrLCrzQMSn95WSLQ0dh2BRH8HWkm4K+kn5dy2DVrHnDPNS43o/lu9ssjfa bnWO8YsxUk+zjq5lheGxGjaynzUKMP5vJojXqeLZ/uoDKlcTNxgQvcxbQMd0j6GD eNG5K4r1QcRk6seztn4b3JPckTg9uY0DngCv0M3kFLhhallTCq8= =N8Qg -----END PGP SIGNATURE-----