public inbox for [email protected]  

help / color / mirror / Atom feed
From: Pgpool Global Development Group via PostgreSQL Announce <[email protected]>
To: PostgreSQL Announce <[email protected]>
Subject: Pgpool-II 4.5.4, 4.4.9, 4.3.12, 4.2.19 and 4.1.22 released.
Date: Mon, 09 Sep 2024 09:11:20 +0000
Message-ID: <[email protected]> (raw)

# What is Pgpool-II?

Pgpool-II is a tool to add useful features to PostgreSQL, including:  

* connection pooling
* load balancing
* automatic failover and [more](https://www.pgpool.net/).

# Minor releases

Pgpool Global Development Group is pleased to announce the availability of following versions of Pgpool-II: 

* 4.5.4
* 4.4.9
* 4.3.12
* 4.2.19
* 4.1.22

This release contains a security fix.

When the query cache feature is enabled, it was possible that a database user can read rows from tables that should not be visible for the user through query cache (CVE-2024-45624).

All versions of Pgpool-II older than 4.5.4, 4.4.9, 4.3.12, 4.2.19, 4.1.22, and all older versions that has the query cache feature (the query cache feature was implemented in 3.2) are affected by the vulnerability.

It is strongly recommend to upgrade to Pgpool-II 4.5.4, 4.4.9, 4.3.12, 4.2.19 and 4.1.22 or later. Or you should better turn off the query cache feature.

Please take a look at [release notes](https://www.pgpool.net/docs/latest/en/html/release.html).

You can download [the source code and RPMs](https://pgpool.net/mediawiki/index.php/Downloads).

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: Pgpool-II 4.5.4, 4.4.9, 4.3.12, 4.2.19 and 4.1.22 released.
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox