[QGIS-Developer] PostgreSQL vulnerability in the QGIS application

[Bo Victor Thomsen]

Hi Greg -

You're right about the source code distribution.

What I was talking about - and didn't specifically explain - was the 
different  binary installation packages available through the QGIS.org 
homepage. Which is used by the large majority of QGIS-using 
organizations  to install QGIS.

So here is information about the specific QGIS installation 
packages containing the latest PostgreSQL client version *18.4*:

  * QGIS LTR, version *3.44.12*. Long term release, suitable for
    enterprise use.
  * QGIS lastest version *4.2.0*. Early adapter version, not (yet)
    suitable for enterprise use.

Both binary packages can be downloaded at QGIS.org homepage: 
https://qgis.org/download/

Med venlig hilsen / Best regards

Bo Victor Thomsen

On 08-07-2026 17:36, Greg Troxel via QGIS-Developer wrote:
> Bo Victor Thomsen via QGIS-Developer<qgis-developer at lists.osgeo.org>
> writes:
>
>> As of today, You have 2 options to get the desired postgres upgrades
>> (18.4.1):
>>
>>   * Install the latest LTR version af QGIS, ver. 3.44.12. It comes with
>>     version 18.4.1 of pqlib (Postgres communication).
>>   * Install the newest version of QGIS, version 4.2.0 . It too, comes
>>     with pqlib version 18.4.1.
>>
>>     Version 4.2.*0* is an "Early adopter" version -  not yet suited for
>>     enterprise use. However, If you can wait, version 4.2*.4*, will be
>>     the new LRT version around October 30, 2026.
> But qgis *source code* does not come with postgresql at all.  You are
> talking about a particular binary package, and I think it would be
> helpful if messages describing binary packages identify the binary
> package, every time.
> _______________________________________________
> QGIS-Developer mailing list
> QGIS-Developer at lists.osgeo.org
> List info:https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe:https://lists.osgeo.org/mailman/listinfo/qgis-developer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-developer/attachments/20260708/491956b2/attachment.htm>