[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade postgresql to 16.7 to fix CVE-2025-1094 [High] - branch 3.0-dev (#12489)

Author: CBL-Mariner-Bot

SPECS/postgresql/postgresql.signatures.json

@@ -1,6 +1,6 @@
 {
   "Signatures": {
     "postgresql.service": "2d209e10523c43e7011b4a85e9e32f5f5911a74a25012cdeaf5fdeb0a5664461",
-    "postgresql-16.5.tar.bz2": "a6cbbb7037f98cb8afa7d3970b7c48040cf02b115e39253a0c037a8bb8e778f0"
+    "postgresql-16.7.tar.bz2": "62e02f77ebfc4a37f1700c20cc3ccd85ff797b5613766ebf949a7899bb2113fe"
   }
 }

SPECS/postgresql/postgresql.spec

@@ -2,8 +2,8 @@
 %define groupname postgres
 Summary:        PostgreSQL database engine
 Name:           postgresql
-Version:        16.5
-Release:        2%{?dist}
+Version:        16.7
+Release:        1%{?dist}
 License:        PostgreSQL
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -243,6 +243,9 @@ fi
 %{_unitdir}/%{name}.service
 
 %changelog
+* Mon Feb 17 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 16.7-1
+- Auto-upgrade to 16.7 - to fix CVE-2025-1094
+
 * Mon Jan 15 2025 Uri Smiley <udsmicrosoft@microsoft.com> - 16.5-2
 - Add LZ4 option to enable TOAST compression
 

cgmanifest.json

@@ -21403,8 +21403,8 @@
         "type": "other",
         "other": {
           "name": "postgresql",
-          "version": "16.5",
-          "downloadUrl": "https://ftp.postgresql.org/pub/source/v16.5/postgresql-16.5.tar.bz2"
+          "version": "16.7",
+          "downloadUrl": "https://ftp.postgresql.org/pub/source/v16.7/postgresql-16.7.tar.bz2"
         }
       }
     },