public inbox for [email protected]
help / color / mirror / Atom feedFrom: Daniele Varrazzo <[email protected]>
To: Psycopg <[email protected]>
Subject: Psycopg 2.9.2, 3.0.4 released
Date: Mon, 15 Nov 2021 16:56:10 +0100
Message-ID: <CA+mi_8bgSSnWHwzN=g_Hci2pfzMxyTVjJbXZdb4CyBO+KACz9Q@mail.gmail.com> (raw)
Hello,
We have released new versions of both psycopg 2 and 3 packages, addressing
the security issue CVE-2021-23222, affecting the libpq and which has been
resolved in PostgreSQL 14.1 and in the other versions provided in the same
release [1].
The new psycopg releases only solve the problem in the binary packages: if
you install psycopg from source you will need to upgrade the system libpq
library instead.
In order to verify what libpq version your system is using you can query
the functions 'psycopg2.extensions.libpq_version()' [2] and
'psycopg.pq.version()' [3].
Thank you very much!
-- Daniele
[1]:
https://www.postgresql.org/about/news/postgresql-141-135-129-1114-1019-and-9624-released-2349/
[2]:
https://www.psycopg.org/docs/extensions.html#psycopg2.extensions.libpq_version
[3]: https://www.psycopg.org/psycopg3/docs/api/pq.html#psycopg.pq.version
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected]
Subject: Re: Psycopg 2.9.2, 3.0.4 released
In-Reply-To: <CA+mi_8bgSSnWHwzN=g_Hci2pfzMxyTVjJbXZdb4CyBO+KACz9Q@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox