-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 09 Jul 2025 17:34:58 +0800 Source: pgpool2 Binary: libpgpool-dev libpgpool2 libpgpool2-dbgsym pgpool2 pgpool2-dbgsym postgresql-15-pgpool2 postgresql-15-pgpool2-dbgsym Architecture: s390x Version: 4.3.5-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Aron Xu Description: libpgpool-dev - pgpool control protocol library - headers libpgpool2 - pgpool control protocol library pgpool2 - connection pool server and replication proxy for PostgreSQL postgresql-15-pgpool2 - connection pool server and replication proxy for PostgreSQL - mod Closes: 1081659 1106119 Changes: pgpool2 (4.3.5-1+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2024-45624: incompatible policies may allow an unauthorized user to retrieve table data from query cache (Closes: #1081659) * CVE-2025-46801: authentication bypass by primary weakness vulnerability (Closes: #1106119) Checksums-Sha1: a8e64d7c0b6fe2235f2b397e48177bdc1dc8cd87 149840 libpgpool-dev_4.3.5-1+deb12u1_s390x.deb 574f579f3ada7e36b29be41f3f272312de74c347 62252 libpgpool2-dbgsym_4.3.5-1+deb12u1_s390x.deb 88b5cdd18ecbc7b0c5130c544275f15a1f61275a 140468 libpgpool2_4.3.5-1+deb12u1_s390x.deb f722f791da03f1742f9c9b0157e9c43d92878fde 1854248 pgpool2-dbgsym_4.3.5-1+deb12u1_s390x.deb 88457e9c43ee5d2bf41dcc968bbf4a07ba39af2b 9354 pgpool2_4.3.5-1+deb12u1_s390x-buildd.buildinfo 413665d8523a27e01c7baa612d2ba5f16f35bce4 1168868 pgpool2_4.3.5-1+deb12u1_s390x.deb 95eed8e0be97416575548db1db479fdc510951ad 49024 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_s390x.deb 6a92e823fb6abcd1142eecaaf3d484a22a5f9878 131620 postgresql-15-pgpool2_4.3.5-1+deb12u1_s390x.deb Checksums-Sha256: 6506b0c0c63821d1d2b3228c7b189860ae0f8dfd48da42f5940d3d7d34500e65 149840 libpgpool-dev_4.3.5-1+deb12u1_s390x.deb c523935418948f35c1a42ec2e53b3c7851283da6b995ad46f94382963d49f9cf 62252 libpgpool2-dbgsym_4.3.5-1+deb12u1_s390x.deb 0e050fb0d65eebbbc917f2653234af2ab4301e1d1fd617ce31d8a08b20d414ae 140468 libpgpool2_4.3.5-1+deb12u1_s390x.deb 793ab42a767bcd23c737c9d808d265874ca1bb09549da3c5f8efb2144134d528 1854248 pgpool2-dbgsym_4.3.5-1+deb12u1_s390x.deb e9d376542c2030484fe3c0f26115b8d9e3977887423a5e3daf44c1c290d2246f 9354 pgpool2_4.3.5-1+deb12u1_s390x-buildd.buildinfo 71ee0ab4bc5e7e2d4b92aa7e3ede99b2a3219ad72a85191cc4cb61609bddb1ff 1168868 pgpool2_4.3.5-1+deb12u1_s390x.deb 6912a546b5d39eee96a2345a17c54e1750a03b6ce18065dac6906be42e9a0cfa 49024 postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_s390x.deb 320576cdd6a26d2a34b39b992656af77753110b1e42a9094df3d9dfcf5389019 131620 postgresql-15-pgpool2_4.3.5-1+deb12u1_s390x.deb Files: 634baaa988374c3f0d1000930d0df8ee 149840 libdevel optional libpgpool-dev_4.3.5-1+deb12u1_s390x.deb 968423b4596b3b2222187e925dfaffa5 62252 debug optional libpgpool2-dbgsym_4.3.5-1+deb12u1_s390x.deb f621931cd2909ef9eac724066a24ee08 140468 libs optional libpgpool2_4.3.5-1+deb12u1_s390x.deb 0204240b4dec598234872dc0ec5b2c4a 1854248 debug optional pgpool2-dbgsym_4.3.5-1+deb12u1_s390x.deb ca4343a757786f585ac351acc8713f3a 9354 database optional pgpool2_4.3.5-1+deb12u1_s390x-buildd.buildinfo 9836b9ee98ad712754b6d55de0626496 1168868 database optional pgpool2_4.3.5-1+deb12u1_s390x.deb 45706c556e4281a0bcd9e4afe306242c 49024 debug optional postgresql-15-pgpool2-dbgsym_4.3.5-1+deb12u1_s390x.deb 7ef8b88b59eb8520477e18150497c3a3 131620 database optional postgresql-15-pgpool2_4.3.5-1+deb12u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmiUaDMACgkQkaCrxAR3 BY3wEhAAxHu5Cou7Z97cSlhal2xxMXT4sfmx9ztbmkm0d1fF4tt5WwsLmPweew1V JmKvN+Tdm+GWij1HzvkpTBB1E7p9vEy0KFFvH38e6PHsGYsD7PU3ZNpMxbxteoXD B3SeQzJ2a1sPzm7sem5aJujBgmv3JuR4kxXsnEY/cVaZ0Vf/TBn7wv0AqCbrKRY/ 55P4NCp2nes7+g9DkhrjXw4ClgVGBgc5sObDJ1FuZNUqHWnx2xG9p7vRT8BZsBQj WspVBuv0qPipu2Jcy1SAPVnAVdyAxb+QWzKtZlN4RTA3zUDyB/DiUzJQ8DNWQSGP I79GbuWHdkz7aopkGoJdD53Y6zwwb+LQl/ibJuyJoIcZOSfPUaRvsS1LBqrkcoxS 8VXZDKP8bbOoll6THZQxM8DMRXSMBvO3aaJ/3wEIESafI69ihMQ8VEOaThtxO72C wKZpdREGByiNa0/xf5VO/rmuost/qXz5TyuwqgTHvSfOW6DsGwEhnwnIRsQTGyId ujO22yKQSKC+5ckvqogy6A7p4wCCuByPo/8m2zELfUPr+3KWVaV+ctb1pBQW/P5s 1u11ZWE1/7oCFGsh/INOxPn99dp7pQfGa+Pyw08R0Of7qOyK3PlywO9WaMhAdfe/ gm7pfTxargKQ2jCt5AaVpcQQaTrLUo491pNHDn/SxrPudjiYR94= =8zz+ -----END PGP SIGNATURE-----