PostgreSQL Issues Critical Security Updates and Retires Version 14

The PostgreSQL Global Development Group has issued a comprehensive update for its open-source database management system, covering versions 14.25, 15.20, 16.16, 17.12, and 18.7. This release is particularly significant as it addresses 52 security vulnerabilities and more than 140 technical bugs identified over recent months. Developers and system administrators are encouraged to apply these updates to maintain system integrity and performance.

With this release, PostgreSQL 14 has officially reached its end-of-life (EOL) status. This version will no longer receive security patches or bug fixes, making it essential for organizations still running version 14 in production environments to migrate to a newer, supported version. The development group recommends a major version upgrade strategy, such as using pg_upgrade or data restoration tools, for those moving to more recent iterations.

The announcement also included the second release candidate for PostgreSQL 19. This version is currently slated for general availability on November 19, 2026. The release candidate incorporates all the security and bug fixes found in the current stable updates, serving as a final testing ground before the major version's official launch.

In addition to security patches, the update includes refreshed time zone data reflecting changes in Canada and Cuba. Technical maintenance notes indicate that users may need to perform specific post-update tasks, such as reindexing GIN, GiST, and certain B-tree indexes, to resolve potential corruption issues. Those utilizing incremental backups are also advised to initiate a new full backup following the update.