Skip to content

Commit 902a1c0

Browse files
[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade pgbouncer to 1.24.1 to fix CVE-2025-2291 [High] - branch 3.0-dev (#13541)
1 parent 684faed commit 902a1c0

3 files changed

Lines changed: 7 additions & 4 deletions

File tree

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"Signatures": {
33
"pgbouncer.service": "9c158af014827b4b96577caacce1d5fbf1e186ebb481c96f4f071a0f05425fe1",
4-
"pgbouncer-1.20.1.tar.gz": "24992cf557d73426d7048698dffc7b019e6364d4d8757ae2cf5e2471286a2088"
4+
"pgbouncer-1.24.1.tar.gz": "da72a3aba13072876d055a3e58dd4aba4a5de4ed6148e73033185245598fd3e0"
55
}
66
}

SPECS/pgbouncer/pgbouncer.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
Summary: Connection pooler for PostgreSQL.
22
Name: pgbouncer
3-
Version: 1.20.1
3+
Version: 1.24.1
44
Release: 1%{?dist}
55
License: ISC License
66
URL: https://www.pgbouncer.org/
@@ -80,6 +80,9 @@ fi
8080
/usr/share/doc/pgbouncer/*
8181

8282
%changelog
83+
* Tue Apr 22 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.24.1-1
84+
- Auto-upgrade to 1.24.1 - bump version to fix CVE-2025-2291
85+
8386
* Fri Oct 27 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.20.1-1
8487
- Auto-upgrade to 1.20.1 - Azure Linux 3.0 - package upgrades
8588

cgmanifest.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21083,8 +21083,8 @@
2108321083
"type": "other",
2108421084
"other": {
2108521085
"name": "pgbouncer",
21086-
"version": "1.20.1",
21087-
"downloadUrl": "https://pgbouncer.github.io/downloads/files/1.20.1/pgbouncer-1.20.1.tar.gz"
21086+
"version": "1.24.1",
21087+
"downloadUrl": "https://pgbouncer.github.io/downloads/files/1.24.1/pgbouncer-1.24.1.tar.gz"
2108821088
}
2108921089
}
2109021090
},

0 commit comments

Comments
 (0)