Accepted pgextwlist 1.15-2+deb12u1 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 Sep 2026 10:03:02 +0100
Source: pgextwlist
Architecture: source
Version: 1.15-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian PostgreSQL Maintainers <team+postgresql@tracker.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Changes:
 pgextwlist (1.15-2+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2023-39417
     Reject substituting extension schemas or owners matching ["$'\].
 .
     The extwlist.custom_path script mechanism was vulnerable to SQL
     injection via crafted schema and user names. The same problem was fixed
     in August 2023 in PostgreSQL (cd5f2a3570), and is now fixed in
     pgextwlist as well. Substitutions that attempt to insert any of "$'\ are
     now simply rejected. (We don't try to quote the values as we don't know
     which quoting context we are in.)
Checksums-Sha1:
 5b144f3ddcec6f8a0bcbd8a887ec10833ef504ee 2257 pgextwlist_1.15-2+deb12u1.dsc
 47c15f672e4b04ac7315607baa3bea4e86516c4d 18961 pgextwlist_1.15.orig.tar.gz
 b90bf7e560d7be3fe839b6fe14ef56b2d9cea22f 5320 pgextwlist_1.15-2+deb12u1.debian.tar.xz
 ad332b5cb863fe4ec4b4b74e6d29eb602694046f 6946 pgextwlist_1.15-2+deb12u1_source.buildinfo
Checksums-Sha256:
 7dc88b2db1956e228d26f3689170c5a3b968c79185bb1462c86ea8b5aa9a08d6 2257 pgextwlist_1.15-2+deb12u1.dsc
 bcc73279278c06a6e8c9c5aa296a73b99a591830515a55fd8ae0f2d5e785d7c5 18961 pgextwlist_1.15.orig.tar.gz
 39bb6c8abdc2cf10f19da488323b55a3b75b7c15cc051716698538780d3ba10c 5320 pgextwlist_1.15-2+deb12u1.debian.tar.xz
 3b070bcd83f492f4fe6b42c406f622734f22a5b99a933773c291b306b0e18ae5 6946 pgextwlist_1.15-2+deb12u1_source.buildinfo
Files:
 9d15e012f1aded935105bc6205974bef 2257 database optional pgextwlist_1.15-2+deb12u1.dsc
 a1725e3e08795f1f6eb7426593bae81e 18961 database optional pgextwlist_1.15.orig.tar.gz
 38fe743925d4246994f7ffd33c483d33 5320 database optional pgextwlist_1.15-2+deb12u1.debian.tar.xz
 9e4fcd9ae25091803cc5c91ef1288d52 6946 database optional pgextwlist_1.15-2+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=mD+1
-----END PGP SIGNATURE-----