PostgreSQL: include clients in the update plan

Maintenance beyond the server

In this retrospective May review, the PostgreSQL project released versions 18.4, 17.10, 16.14, 15.18 and 14.23 on May 14, 2026. Security fixes include the libpq client library. Official advisory.

Map the access paths

For a hosted application, the inventory should also consider backup tools, administration scripts and application images. Updating the server does not necessarily describe the client version bundled elsewhere. A practical question is therefore: which programs talk to the database, from which environment and through which libraries? This map makes the maintenance scope more concrete than a number shown in the server console.

Verify useful operations

Once an update is prepared, application reads and writes cover only part of the service. A backup followed by a trial restore provides different evidence, especially useful for the tools concerned. Exact exposure depends on versions and functions in use and should be compared with the official advisory. This announcement does not establish that any particular installation was compromised.