Release Announcement EDB PgBouncer 1.16.1.0

This article was originally published on November 12, 2021

WHAT’S NEW

This update is notifying you of the new release of EDB PgBouncer 1.16.1.0. PgBouncer is a lightweight connection pooling utility for PostgreSQL and EDB Postgres Advanced Server. This utility, based on the open source PgBouncer project, includes enhancements to support EDB Connectors that require compatible out parameter handling.

EDB PgBouncer is enhanced to support extra EDB Postgres Advanced capabilities, and can be used in conjunction with PostgreSQL or EDB Postgres Advanced.

Highlights of this release

This release contains a merge with upstream 1.16.1, which includes the following fixes:

Highlights

Type

Make PgBouncer acting as a server reject extraneous data after an SSL or GSS encryption handshake.
A man-in-the-middle with the ability to inject data into the TCP connection could stuff some cleartext data into the start of a supposedly encryption-protected database session. This could be abused to send faked SQL commands to the server, although that would only work if PgBouncer did not demand any authentication data. However, a PgBouncer setup relying on SSL certificate authentication might well not do so.

Security Fix

This is considered a high-severity vulnerability. Apply this update as soon as possible if it represents a risk in your environment.

For more information, please refer to the upstream release notes.

TELL ME MORE

For more details, please review the EDB PgBouncer 1.16.1.0 documentation:
https://www.enterprisedb.com/docs/pgbouncer/latest/

IS THIS FOR ME?

This announcement is for EDB customers who are using, or are interested in, EDB PgBouncer and have a subscription purchased for:

Standard Subscription
Enterprise Subscription

HOW TO GET THE SOFTWARE

EDB PgBouncer 1.16.1.0 is available from the EDB website https://www.enterprisedb.com/downloads/pgbouncer/

To request the credentials required to access EDB repositories, please visit https://www.enterprisedb.com/repository-access-request

TROUBLESHOOTING

If you experience any problems around the installation, migration, upgrade or general use of your EDB software, please contact our Technical Support teams.

We can be reached at https://techsupport.enterprisedb.com, and we’re also available 24 x 7 via email or phone at the details below:

Email: techsupport@enterprisedb.com

Trial Use Assistance: trial-help@enterprisedb.com

Phone:

US: +1-732-331-1320 / 1-800-235-5891

UK: +44-2033719820

Brazil: +55-2139581371

India: +91-20-66449612

Search

Was this article helpful?