PostgreSQL 16.7 → 16.8

1 release · 0 breaking changes · 1 security fix · 0 advisories fixed

1security0breaking0deprecated0feature1fix

Is 16.7 affected? · What changed up to 18.6

Breaking changes

None in the release notes.

Security changes

security Improve behavior of libpq's quoting functions (Andres Freund, Tom Lane) The changes made for CVE-2025-1094 had one serious oversight: PQescapeLiteral() and PQescapeIdentifier() failed to honor their string length parameter, instead always reading to the input string's trailing null. This resulted… in 16.8

Every release in between

16.8 Feb 20, 2025 Release notes ↗

securityImprove behavior of libpq's quoting functions (Andres Freund, Tom Lane) The changes made for CVE-2025-1094 had one serious oversight: PQescapeLiteral() and PQescapeIdentifier() failed to honor their string length parameter, instead always reading to the input string's trailing null. This resulted…

fixFix meson build system to correctly detect availability of the bsd_auth.h system header (Nazir Bilal Yavuz)