Security · High impactFan score 21 · Tier C2 sources

Devrim GÜNDÜZ: PostgreSQL November 2026 minor releases: update the server and extensions together

The Brief · written from 2 sources

PostgreSQL released 18.7, 17.12, 16.16, 15.20 and 14.25 on 2026-11-12, fixing 52 newly disclosed security vulnerabilities.
The releases also include more than 140 bug fixes, according to Phoronix.
PostgreSQL 19 RC2 was released the same day.

Why it matters

Developers running PostgreSQL 14 through 18 should apply the minor release for their major version, since the update fixes 52 security vulnerabilities.

Who’s affected

Teams running PostgreSQL 14, 15, 16, 17 or 18
Users of PGDG RPM repositories with PostgreSQL extensions

What to do

Update PostgreSQL to 18.7, 17.12, 16.16, 15.20 or 14.25, matching your major version.
If you use PGDG RPM repositories, update PostgreSQL and all installed extensions in the same transaction rather than updating the server alone.

PostgreSQL 18.7
PostgreSQL 17.12
PostgreSQL 16.16
PostgreSQL 15.20
PostgreSQL 14.25
PostgreSQL 19 RC2
#postgresql
#security
#database
#release
#vulnerabilities

PostgreSQL 18.7, 17.12, 16.16, 15.20 and 14.25 are out today. If you use the PGDG RPM repositories ( yum.postgresql.org or zypp.postgresql.org ), please update PostgreSQL and all of your extensions in the same transaction this time. Do not update the server today and the…

Read the full story at postgr.es ↗