12.336.2025 - PgBouncer 1.25.1 released - Fixing a bunch of bugs before Christmas (including CVE-2025-12819)

PgBouncer 1.25.1 has been released. This release fixes CVE-2025-12819: Before this release it was possible for an unauthenticated attacker to execute arbitrary SQL during authentication by providing a malicious search_path parameter in the StartupMessage. Systems that have ALL the following configurations are vulnerable:
- Download PostgreSQL
- View Press Release
- Visit PostgreSQL