The PostgreSQL Global Development Group is planning for an out-of-cycle release on November 21, 2024 to address two regressions that were released as part of the November 14, 2024 update release, which included releases for 17.1, 16.5, 15.9, 14.14, 13.19, and 12.21. As part of this release, we will issue fixes for all supported versions (17.2, 16.6, 15.10, 14.15, 13.20), and for 12.22, even though PostgreSQL 12 is now EOL.
While these regressions may not impact all users, the PostgreSQL Global Development Group determined that it would be better to address these sooner than the next scheduled release on February 13, 2025. A high-level description of the regressions are as follows.
The fix for CVE-2024-10978 prevented ALTER USER ... SET ROLE ... from having any effect. This will be fixed in the upcoming release.
Certain PostgreSQL extensions took a dependency on an Application Binary Interface (ABI) that was modified in this release and caused them to break. Currently, this can be mitigated by rebuilding the extensions against the updated definition.
If you are impacted by either of these issues, we advise to wait for the availability of 17.2, 16.6, 15.10, 14.15, 13.20, and 12.22 before upgrading.