DATABASES Signal 205
PostgreSQL ODBC Version REL-18_00_0002 Released
This release patches a stack buffer overflow, a double-free causing heap corruption during SQLDisconnect, and several out-of-bounds read conditions that could crash or compromise applications using the driver. Engineers connecting to PostgreSQL via ODBC should upgrade promptly to avoid stability and security exposure.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Memory safety bugs fixed include a stack buffer overflow in getPrecisionPart(), a double-free during SQLDisconnect cleanup, and multiple out-of-bounds reads on connection strings and string literals.
Input validation was tightened to reject overlong cursor names, invalid SQLPutData lengths, and malformed UTF-16 surrogate pairs before they reach internal processing.
Sensitive connection parameters are now redacted in logs, reducing the risk of credential leakage in driver log output.
THE CLUSTER