PostgreSQL readiness bugs and QEMU security patches

PostgreSQL hackers debated release-blocking catalog, checksum, and partition bugs while reviewing TOAST and tuple-store fixes. QEMU and ClickHouse threads advanced multi-patch security and schema work on USB CCID, view barriers, and QOM properties.

PGQ catalog bugs raise release questions

Core PostgreSQL developers reported multiple locking, dependency, and crash bugs in the PGQ catalog representation and its pg_dump support. The release management team questioned readiness for versions 19 and 20. Readers tracking the next major releases should note the heated dispute over whether the feature is stable enough to ship.

8-byte TOAST pointer patch advances

A revised patch series adding support for 8-byte TOAST values continued through technical review on pgsql-hackers. Participants flagged compatibility impact on extensions that assume the existing pointer format. The change matters for installations approaching TOAST size limits and for extension authors who must adapt.

QEMU CCID fixes close three CVEs

A 27-patch series on qemu-devel addressed out-of-bounds and assertion flaws in the USB CCID smartcard reader device, along with migration, endianness, and specification issues. The work closes three CVEs. Operators running QEMU with smartcard passthrough gain concrete hardening from the updates.

ClickHouse tightens view security barriers

ClickHouse developers discussed fixes that strengthen security barriers for DEFINER and NONE views against additional_table_filters and row-policy predicate pushdown. The thread centers on preventing unauthorized filter application. Deployments that rely on view-based access control should track the resulting behavior changes.

Offline checksum changes break standbys

PostgreSQL hackers reported that offline data checksum changes can leave standbys with mismatched or unreadable checksum state. Patch discussion is ongoing. Sites that enable or alter checksums outside normal operation risk standby corruption if they apply the current behavior unchanged.

Missing tts_tid causes ctid corruption

A patch fixes the absence of tts_tid in ExecForceStoreHeapTuple, which produced ctid corruption, unexpected table extension, and invalid pages after FOR UPDATE following GiST KNN scans. The defect surfaces under specific index and locking patterns. Users of GiST KNN with concurrent updates benefit from the correction.

QEMU QOM properties gain QAPI types

A 62-patch QEMU series associates QOM and qdev properties with QAPI schema types, replacing ad-hoc strings. The goal is improved introspection and consistency. Developers maintaining QEMU device models or management tooling gain a clearer property contract.

Interrupted partition detach crashes

Bug reports and patches address crashes on partitions whose concurrent DETACH never finished, including a PostgreSQL 19 regression in publication handling. Incomplete detach leaves catalogs in a state that later operations cannot tolerate. Operators using concurrent detach with logical replication should watch the fixes.