openSUSE-SU-2021:3255-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3255-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2021:3255-1

Upstream

CVE-2021-3677

Related

CVE-2021-3677

Published

2021-09-29T14:30:30Z

Modified

2026-03-11T07:33:19Z

Summary

Security update for postgresql13

Details

This update for postgresql13 fixes the following issues:

CVE-2021-3677: Fixed memory disclosure in certain queries (bsc#1189748).
Fixed build with llvm12 on s390x (bsc#1185952).
Re-enabled icu for PostgreSQL 10 (bsc#1179945).
Made the dependency of postgresqlXX-server-devel on llvm and clang optional (bsc#1187751).
llvm12 breaks PostgreSQL 11 and 12 on s390x. Use llvm11 as a workaround (bsc#1185952).

References

Affected packages

openSUSE:Leap 15.3 / postgresql13

Package

Name: postgresql13
Purl: pkg:rpm/opensuse/postgresql13&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

13.4-5.16.2

Ecosystem specific

{
    "binaries":  [
        {
            "libecpg6":  "13.4-5.16.2",
            "libecpg6-32bit":  "13.4-5.16.2",
            "libpq5":  "13.4-5.16.2",
            "libpq5-32bit":  "13.4-5.16.2",
            "postgresql13":  "13.4-5.16.2",
            "postgresql13-contrib":  "13.4-5.16.2",
            "postgresql13-devel":  "13.4-5.16.2",
            "postgresql13-docs":  "13.4-5.16.2",
            "postgresql13-llvmjit":  "13.4-5.16.2",
            "postgresql13-plperl":  "13.4-5.16.2",
            "postgresql13-plpython":  "13.4-5.16.2",
            "postgresql13-pltcl":  "13.4-5.16.2",
            "postgresql13-server":  "13.4-5.16.2",
            "postgresql13-server-devel":  "13.4-5.16.2",
            "postgresql13-test":  "13.4-5.16.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3255-1.json"