-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 09 Jul 2025 17:34:58 +0800 Source: pgpool2 Binary: libpgpool-dev libpgpool2 libpgpool2-dbgsym pgpool2 pgpool2-dbgsym postgresql-15-pgpool2 postgresql-15-pgpool2-dbgsym Architecture: mipsel Version: 4.3.5-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Aron Xu Description: libpgpool-dev - pgpool control protocol library - headers libpgpool2 - pgpool control protocol library pgpool2 - connection pool server and replication proxy for PostgreSQL postgresql-15-pgpool2 - connection pool server and replication proxy for PostgreSQL - mod Closes: 1081659 1106119 Changes: pgpool2 (4.3.5-1+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2024-45624: incompatible policies may allow an unauthorized user to retrieve table data from query cache (Closes: #1081659) * CVE-2025-46801: authentication bypass by primary weakness vulnerability (Closes: #1106119) Checksums-Sha1: 989ea630443fb04c118d98f3d022d49cd8a0de4d 152816 libpgpool-dev_4.3.5-1+deb12u1_mipsel.deb c6cd3118502c188d35ceecd9cabea85a63d21d48 65432 libpgpool2-dbgsym_4.3.5-1+deb12u1_mipsel.deb 93defaaadc0daa970efc771a9921ff1ae1dc9409 139368 libpgpool2_4.3.5-1+deb12u1_mipsel.deb 8061d0e7d6c5fe7f6134e42fbf7d5ec979a3e625 1918596 pgpool2-dbgsym_4.3.5-1+deb12u1_mipsel.deb a9c8135f8d6e08453383f82b266ea67d31aee627 10819 pgpool2_4.3.5-1+deb12u1_mipsel-buildd.buildinfo 1789bf2fb9e4fc865f69cdf0712658186f67df5e 1164856 pgpool2_4.3.5-1+deb12u1_mipsel.deb 17e310b84a99b38b8cac0b53b756f4850bbe8095 50568 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_mipsel.deb 503fd4310359a4dd02f80dd8c53a0fd50bb83b30 158136 postgresql-15-pgpool2_4.3.5-1+deb12u1_mipsel.deb Checksums-Sha256: 8f34bf59e865d49020c1b74bc55dac70cc365f023ad8aa26d8eaea83eaf9645f 152816 libpgpool-dev_4.3.5-1+deb12u1_mipsel.deb 8f8de45f8d338cf5216087cd9050595a18912421d90df8add0676785793ab4c0 65432 libpgpool2-dbgsym_4.3.5-1+deb12u1_mipsel.deb c80fa0c305f31762a3e8513f14a92ee850d86a9d09bec6f86a682a2e6381ae44 139368 libpgpool2_4.3.5-1+deb12u1_mipsel.deb 47feddbc80aec7ceea7f9dce1b2d27bbde3f245596273cb07592197824193259 1918596 pgpool2-dbgsym_4.3.5-1+deb12u1_mipsel.deb 8c62bffa85b37f7635ec96ef339c927f66cdf12eddf81501445ce0fb573b0a9e 10819 pgpool2_4.3.5-1+deb12u1_mipsel-buildd.buildinfo 72042d1465a337aa58191296577b47bf4f0d98b722f2358e4dd8d08618be5cae 1164856 pgpool2_4.3.5-1+deb12u1_mipsel.deb b972cf829732d5ff946c51eda02c99528f2b60a35cd5a5929f7da9b174226207 50568 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_mipsel.deb 84f5abd9f37791beeb0509f9302bc561f66ae95b17f70f1292de7be2bef11b33 158136 postgresql-15-pgpool2_4.3.5-1+deb12u1_mipsel.deb Files: 615f48317e5b62c8a48ba6a4c39dc931 152816 libdevel optional libpgpool-dev_4.3.5-1+deb12u1_mipsel.deb 8b028bdce3720516f7d13e370d29d312 65432 debug optional libpgpool2-dbgsym_4.3.5-1+deb12u1_mipsel.deb 58207e9e19a1ad8bd8d91baa91bc491e 139368 libs optional libpgpool2_4.3.5-1+deb12u1_mipsel.deb 8df327fcfa9b538885bf87827b70ef40 1918596 debug optional pgpool2-dbgsym_4.3.5-1+deb12u1_mipsel.deb 562ebf4e5eb8918b2e773a3591650df9 10819 database optional pgpool2_4.3.5-1+deb12u1_mipsel-buildd.buildinfo 1157f229a6ae340a5bbac2c5a0321a8a 1164856 database optional pgpool2_4.3.5-1+deb12u1_mipsel.deb 6d469be70d689a1c905adbf04f007c27 50568 debug optional postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_mipsel.deb 8cd54e81069f9785ad961f014ca1a3e6 158136 database optional postgresql-15-pgpool2_4.3.5-1+deb12u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERbXMbY9VMQqnSaVEV4aVsMglzVcFAmiUajgACgkQV4aVsMgl zVd08Q//ZzU0+tecWwZkUCO/5ZaMStmaOEer0cz7iB/ZVp2GTf5ZYSzXwjgyhdWo wNEFlEfNjfcF1WBKCaSk88DPSlUtrJirp6KDo7w6qElqCdZNbv3hDd1N23OtfSxO GQQDmBvLZFdFqcOiDWcSpn6L44orJ8Y3NZIc5fX8Yyx3FB3Z8BXTMky5mAF2LhA9 e/wMXu/xmMGQZpc1c6zxX6Ub3sKZ8Vf5yntdvAXY5O0TEb8avTeeao7S2zwdaXWu Mlin09wq5bO9wh2iRvWeuL+ilJfRYY0ag3lYiSq8MgKFw7sT9jIN9QTJDVGV+Zz2 qvrB9SkZ/EAR4gMBCJDUbs2NiZh7uAPimBC8m6WD57QwMKw84V+ES8/qEsyVCP4t 7zslnj2bDFxBpI1U9HeukbW1/xxlYDPBi0p/DuAnurzqTl9dVmETFhNAl1ZULDNk WmCUA8nLS5OctqznU2HlcoRN9Oj71aajsY3sgJmu0KlSRy8v7Hx+ssIAd6+2CD0l un7u8RKA/u0kxiS44cw8keTjNd7UQn0Im6NoUtguzPLb7IxleGzTgim8eds/coZH BCD0+5GZbva22tTcrTJyYKxBJJp5Pk1o5ah9cF7Ls0s6JTi1EI3mrjpS/5f8vqT4 ujGlPzZ8n5tWDBQs+KAN4433hd5Z8meB3ar1Sk6XF+xl3cdFZ6o= =VQKR -----END PGP SIGNATURE-----