psqlODBC 18.00.0005 released with security fix for CVE-2026-109448
The psqlODBC team has released version 18.00.0005 of psqlODBC, the official ODBC driver for PostgreSQL.
Executive Summary
The psqlODBC team has released version 18.00.0005 of psqlODBC, the official ODBC driver for PostgreSQL. This release fixes one security vulnerability and two bugs. All users should upgrade. Security issue CVE-2026-109448: heap memory corruption when binding more than 32767 parameters CVSS 3.1 base score: 5.9 (Medium) Versions affected: 08.01.0102 through 18.00.0004. psqlODBC stored the number of bound parameters on a statement in a signed 16-bit field.
Open Silicon & Gate-Level Hardware Inspection
From a silicon and hardware engineering viewpoint: - **Interface Neutrality:** Mitigates dependency on proprietary BSPs, empowering open toolchains to address hardware directly. - **Supply Chain Verification:** Schematics and open pinouts allow deterministic audits against silicon errata. - **Lifecycle Decoupling:** Decouples physical hardware utility from commercial vendor end-of-life obsolescence.
Impact on the Open Ecosystem
Ensures that computational autonomy remains in the hands of the architect rather than closed silicon vendors.