PostgreSQL has released its largest security update of the year, addressing 52 vulnerabilities across five supported versions and marking the end of life for version 14. Most of the vulnerabilities carry a Critical rating of 8.8, allowing attackers with limited privileges to execute arbitrary code as the operating system user of the database server. The update includes over 140 additional bug fixes and emphasizes the importance of upgrading from unsupported versions to mitigate security risks. With PostgreSQL 19 set to reach general availability on November 19, users are advised to prepare for the transition and follow specific recommendations for system updates to avoid potential data corruption

PostgreSQL Ships Biggest Security Update, Retires Version 14

PostgreSQL shipped its biggest security release of the year today, closing 52 vulnerabilities across five supported versions plus a near-final PostgreSQL 19 RC 2. Almost all of the flaws carry a Critical rating of 8.8 and let an attacker with modest privileges run arbitrary code as the OS user behind the database server. The drop also marks end of life for PostgreSQL 14, prompting the PGDG to urge anyone still running it to upgrade to a supported version. Meanwhile, PostgreSQL 19 is set to reach general availability on November 19, just one week after this release.

PostgreSQL Ships Biggest Security Update, Retires Version 14 @ Linux Compatible