GoKawiilPostgreSQL patches 52 vulnerabilities, ships 18.7, 17.12, 16.16, 15.20, 14.25, and 19 RC2
The PostgreSQL Global Development Group has released updates across all supported major versions plus a second release candidate for PostgreSQL 19, fixing 52 security vulnerabilities and more than 140 bugs. This update marks the final release for PostgreSQL 14, which is now end-of-life and will no longer get security or bug fixes.
GoKawiil's interpretation of the reporting above, not reported fact.
The high number of security fixes, including a CVSS 8.8 type-confusion flaw allowing arbitrary code execution, suggests administrators should prioritize patching rather than delay. PostgreSQL 14's end-of-life status means organizations still running it face growing risk and should plan migrations to supported versions.
- All supported PostgreSQL versions (14-18) plus 19 RC2 received updates fixing 52 security vulnerabilities.
- PostgreSQL 14 has reached end-of-life and will receive no further security or bug fixes.
- Some fixes may require extra post-update steps, as detailed in the official release notes.
O'Reilly PostgreSQL: Up and Running — If you're managing PostgreSQL upgrades across multiple versions, this book is a solid practical reference for admins and developers alike. It covers core concepts and operational best practices that help you handle version transitions and database maintenance more confidently.
See O'Reilly PostgreSQL: Up and Running on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: postgresql.org, 2026-11-12
Published there as: “PostgreSQL 18.7, 17.12, 16.16, 15.20, 14.25, and 19 RC 2 Released”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.