CVE-2021-23214

Advisory

Psycopg 3.0.4 updates its dependency 'libpq' to at least v14.1 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

^^^^^^^^^^^^^

- Allow to use the module with strict strings comparison (:ticket:`147`).
- Fix segfault on Python 3.6 running in ``-W error`` mode, related to
`!backport.zoneinfo` `ticket 109
<https://github.com/pganssle/zoneinfo/issues/109>`__.
- Build binary package with libpq versions not affected by `CVE-2021-23222
<https://www.postgresql.org/support/security/CVE-2021-23222/>`__
(:ticket:`149`).

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23214