· 3 min · PostgreSQL

Two Decades, Two RCEs: What pgcrypto Has Been Doing Since 2005

Two remote code execution bugs lived in pgcrypto for twenty years until an AI fuzzer found them in a weekend. Here's what you need to know.

0 comments

· 3 min · PostgreSQL

All Your GUCs in a Row: backtrace_functions

Debug PostgreSQL errors by capturing C-level stack traces for specific internal functions.

0 comments

· 7 min · PostgreSQL

Eleven CVEs Walk Into a Release

PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are out as of May 14, 2026. The release fixes eleven security issues and more than sixty bugs. That is not a typ

0 comments

· 4 min · PostgreSQL

PARTITION MERGE/SPLIT, Once More With Locking

PostgreSQL 19 brings back MERGE PARTITIONS and SPLIT PARTITION—but simpler and safer than the first attempt.

0 comments

· 3 min · PostgreSQL

All Your GUCs in a Row: backslash_quote

A 2006 SQL injection vulnerability and multibyte character encodings created `backslash_quote`, a GUC parameter that remains in PostgreSQL for backward…

0 comments

· 4 min · PostgreSQL

Twenty Years in pgcrypto

A heap buffer overflow in pgcrypto's OpenPGP code lurked for two decades—until a December 2025 exploit made it real.

0 comments

· 4 min · PostgreSQL

All Your GUCs in a Row: backend_flush_after

PostgreSQL's complicated relationship with the Linux page cache spawns four GUCs to manage writeback—and backend_flush_after is the conservative one.

0 comments

· 4 min · PostgreSQL

Snowflake Postgres, Lakebase, HorizonDB: Picking the Lock-In You Want

Three major cloud platforms just shipped Postgres with custom storage engines and scale-out architectures.

0 comments

· 17 min · PostgreSQL

Managed Postgres, Examined: Google Cloud SQL for PostgreSQL

Google's managed PostgreSQL returns to first principles: a conventional instance on a VM with a regional disk, plus a distinctive data cache on Enterprise Plus…

0 comments

· 3 min · PostgreSQL

All Your GUCs in a Row: autovacuum_worker_slots

PostgreSQL 18 splits autovacuum configuration to finally let you tune worker concurrency without restarting.

0 comments