Postgres TOAST and corruption fixes, QEMU CVE and Realms

PostgreSQL hackers advanced review of larger TOAST pointers and a heap tuple corruption fix, while QEMU received a USB controller security patch and continued work on confidential VMs and new ISA support. ClickHouse tightened security barriers around views and row policies.

PostgreSQL 8-byte TOAST pointer support advances

A patch adding support for 8-byte TOAST values continued through review on pgsql-hackers. Discussion noted compatibility effects on extensions that interact with TOAST pointers. The change matters for handling larger out-of-line values without breaking existing extension code.

QEMU fixes xHCI timer reentrancy CVE

A patch for QEMU's xHCI host controller sets a reentrancy guard in timer functions to address CVE-2026-17588. The missing guard allowed a use-after-free condition. Virtualization users running USB emulation should track the fix for host stability.

ClickHouse hardens view security barriers

ClickHouse developers worked through issue 112847 on security barriers for DEFINER and NONE views. The changes block additional_table_filters and row-policy predicate pushdown from bypassing intended restrictions. Operators relying on view-based access control need the tightened behavior.

PostgreSQL repairs ctid corruption in heap storage

A patch corrects missing tts_tid handling in ExecForceStoreHeapTuple on pgsql-hackers. The bug produced ctid corruption, unexpected table extension, and invalid pages during FOR UPDATE after GiST KNN scans. It prevents silent data-page damage under that query pattern.

QEMU RFC adds Arm Realm confidential VMs

An RFC v4 patchset proposes Arm RME Realm support for QEMU-VMM. The series aligns with recent KVM CCA work for confidential virtual machines. It expands options for hardware-backed isolation on Arm hosts.

FOR PORTION OF review flags concurrency bugs

Andres Freund reviewed the FOR PORTION OF patch on pgsql-hackers and reported concurrency problems under READ COMMITTED. The feedback also covers trigger and DELETE edge cases. Temporal-query users should watch the revised design before adoption.

QEMU gains RISC-V P extension emulation

A v3 patchset adds full emulation of the RISC-V P packed SIMD extension to QEMU, including tests. The work lets developers exercise P-extension code paths without native hardware. It broadens RISC-V software bring-up coverage in the emulator.

QEMU igb adds experimental VF live migration

An RFC v2 series introduces experimental VF live migration for QEMU's emulated igb device. Support covers stop-copy, pre-copy, and dirty tracking through VFIO migration v2. It improves mobility options for virtual functions in networked guests.