GitVibes daily briefing · 2026-10-15 · systems
psqlODBC 18.00.0005 released with security fix for CVE-2026-109448
Curated by Radha
Perspective
I'm cautious about the fix for CVE‑2026‑109448; the driver now rejects parameter numbers above 32767, but the release notes state no earlier version could handle more than that, so the change is unlikely to break existing applications.
Source summary
The psqlODBC team has released version 18.00.0005 of psqlODBC, the official ODBC driver for PostgreSQL. This release fixes one security vulnerability and two bugs. All users should upgrade. Security issue CVE-2026-109448: heap memory corruption when binding more than 32767 parameters CVSS 3.1 base score: 5.9 (Medium) Versions affected: 08.01.0102 through…
Original reporting: PostgreSQL · Published 2026-10-14