From a926343b62608a08b4d5acfefc80af2e70bb1909 Mon Sep 17 00:00:00 2001
From: CBL-Mariner-Bot <75509084+CBL-Mariner-Bot@users.noreply.github.com>
Date: Fri, 22 Nov 2024 12:09:50 -0800
Subject: [PATCH] [AUTOPATCHER-CORE] Upgrade postgresql to 16.5 CVE-2024-10976,
 CVE-2024-10977, CVE-2024-10978, CVE-2024-10979 (#11128)

Co-authored-by: jslobodzian <joslobo@microsoft.com>
(cherry picked from commit ac7abb3abac73cd87916da9f4f25e5e62cdaea42)
---
 SPECS/postgresql/postgresql.signatures.json | 10 +++++-----
 SPECS/postgresql/postgresql.spec            |  7 +++++--
 cgmanifest.json                             |  4 ++--
 3 files changed, 12 insertions(+), 9 deletions(-)

diff --git a/SPECS/postgresql/postgresql.signatures.json b/SPECS/postgresql/postgresql.signatures.json
index 80da8c0cb3a..5218d76ca6b 100644
--- a/SPECS/postgresql/postgresql.signatures.json
+++ b/SPECS/postgresql/postgresql.signatures.json
@@ -1,6 +1,6 @@
 {
- "Signatures": {
-  "postgresql-16.4.tar.bz2": "971766d645aa73e93b9ef4e3be44201b4f45b5477095b049125403f9f3386d6f",
-  "postgresql.service": "2d209e10523c43e7011b4a85e9e32f5f5911a74a25012cdeaf5fdeb0a5664461"
- }
-}
\ No newline at end of file
+  "Signatures": {
+    "postgresql.service": "2d209e10523c43e7011b4a85e9e32f5f5911a74a25012cdeaf5fdeb0a5664461",
+    "postgresql-16.5.tar.bz2": "a6cbbb7037f98cb8afa7d3970b7c48040cf02b115e39253a0c037a8bb8e778f0"
+  }
+}
diff --git a/SPECS/postgresql/postgresql.spec b/SPECS/postgresql/postgresql.spec
index e65b14a2cee..3e904f50ce6 100644
--- a/SPECS/postgresql/postgresql.spec
+++ b/SPECS/postgresql/postgresql.spec
@@ -2,8 +2,8 @@
 %define groupname postgres
 Summary:        PostgreSQL database engine
 Name:           postgresql
-Version:        16.4
-Release:        2%{?dist}
+Version:        16.5
+Release:        1%{?dist}
 License:        PostgreSQL
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -240,6 +240,9 @@ fi
 %{_unitdir}/%{name}.service
 
 %changelog
+* Mon Nov 18 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 16.5-1
+- Auto-upgrade to 16.5 - CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979
+
 * Thu Aug 29 2024 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 16.4-2
 - Add postgresql-service as a subpackage
 
diff --git a/cgmanifest.json b/cgmanifest.json
index 48217c97ab4..726fd3794ab 100644
--- a/cgmanifest.json
+++ b/cgmanifest.json
@@ -21203,8 +21203,8 @@
         "type": "other",
         "other": {
           "name": "postgresql",
-          "version": "16.4",
-          "downloadUrl": "https://ftp.postgresql.org/pub/source/v16.4/postgresql-16.4.tar.bz2"
+          "version": "16.5",
+          "downloadUrl": "https://ftp.postgresql.org/pub/source/v16.5/postgresql-16.5.tar.bz2"
         }
       }
     },