2026-10-07: PostgreSQL JDBC 42.7.14 Security update for multiple CVE's

From: JDBC Project via PostgreSQL Announce <announce-noreply(at)postgresql(dot)org>
To: PostgreSQL Announce <pgsql-announce(at)lists(dot)postgresql(dot)org>
Subject: 2026-10-07: PostgreSQL JDBC 42.7.14 Security update for multiple CVE's
Date: 2026-10-09 13:05:41
Message-ID: 179155114133.2048044.17950126552919231193@wrigleys.postgresql.org
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-announce

The PostgreSQL JDBC team has released a security release for 2 CVE's

[CVE-2026-107314](https://nvd.nist.gov/vuln/detail/CVE-2026-107314) and the GitHub Security Advisory [GHSA-rhp9-mr79-r74h](https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-rhp9-mr79-r74h)
and
[CVE-2026-107315](https://nvd.nist.gov/vuln/detail/CVE-2026-107315) and the GitHub Security Advisory [GHSA-f64h-wr5q-3qf3](https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-f64h-wr5q-3qf3)

See the [release notes](https://jdbc.postgresql.org/changelogs/2026-10-07-42.7.14-release/) for details

Browse pgsql-announce by date

  From Date Subject
Next Message PgBouncer via PostgreSQL Announce 2026-10-14 10:48:44 PgBouncer 1.26.1 released - Fixes three CVEs
Previous Message PGX, Inc. via PostgreSQL Announce 2026-10-07 07:07:02 pgx-bm25 1.0: BM25 ranked full-text search as a native PostgreSQL index