PostgreSQL’s Global Development Group releases multiple new versions—PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25—on November 12, addressing 52 security vulnerabilities and more than 140 other bugs. The updates include fixes for code execution issues attributed to memory errors and type confusion, where the software processes values as the wrong data type.
Across the reports, the vulnerabilities are described as affecting several components and features, including PL/Perl and PL/Tcl, text search functions such as ts_rank_cd(), parallel query, logical replication, dblink, and statistics import. One article also notes the support timeline change: the updates coincide with ending support for PostgreSQL 14.
Phoronix frames the story around the new releases and the count of security issues disclosed, while Help Net Security emphasizes both the breadth of the fixes and the end of support for PostgreSQL 14. Hacker News presents the same release information in a brief, discussion-oriented format without adding additional technical detail in the provided summary.
