News for hackers. Stuff that matters.

A comment on PostgreSQL 18.7, 17.12, 16.16, 15.20, 14.25, and 19 RC 2 Released. Parent comment

Re:PostgreSQL 18.7, 17.12, 16.16, 15.20, 14.25, and 19 RC 2 ... by levkk on Thursday November 12, 2026 @11:41AM (#50470172)
Most databases run offline and don't allow arbitrary SQL statements. SQL injections are generally eliminated by using the extended protocol.

So, yes, if you're running multi-tenant Postgres as a public service, you should upgrade. Everyone else is in no rush.

[ Parent | on HN ]
Re:PostgreSQL 18.7, 17.12, 16.16, 15.20, 14.25, and 19 RC 2 ... by perlgeek on Thursday November 12, 2026 @12:02PM (#50470486)
No rush, but don't wait too long either.

Yes, the application above it should prevent SQL injection, but if it's imperfect, you don't want an attacker to turn SQL injection into RCE.

[ Parent | on HN ]