PostgreSQL view leaks, REPACK data loss, QEMU AI policy

PostgreSQL security and data-loss threads led the day, with concurrent REPACK and security_barrier view behavior under scrutiny. QEMU advanced an AI contribution policy and aarch64 KVM host modeling while further replication and checksum patches moved on pgsql-hackers.

ON CONFLICT DO SELECT leaks security_barrier rows

PostgreSQL hackers reported that ON CONFLICT DO SELECT can return rows hidden by a security_barrier view. The behavior in PostgreSQL 19 lets INSERT plus SELECT users observe data the view should conceal. Operators relying on row-level security or multi-tenant isolation need the forthcoming correction.

REPACK CONCURRENTLY can drop updates on TOAST rewrite

A bug report and patch series address silent data loss when REPACK CONCURRENTLY rewrites the TOAST table during logical decoding setup. Concurrent updates can vanish without error. Sites that reorganize large tables online while decoding must track the fix.

QEMU proposes new AI contribution policy

QEMU developers circulated an RFC patch series defining a revised policy for AI-generated contributions, requiring metadata together with DCO sign-off. Discussion centered on legal implications of the approach. Maintainers and contributors adopting AI tooling will want the settled rule set.

Offline checksum changes break standby state

Hackers examined cases where offline data checksum changes leave standbys with mismatched or unreadable checksum state. Patch discussion continues. Operators who alter checksums offline on primary or standby pairs should follow the resolution.

Persist slot invalidations before publishing

A patch corrects replication slot invalidation ordering so shared-memory state is not published before it is durable on disk. Premature publication can leave inconsistent slot state after restart. Logical replication deployments benefit from the tighter persistence contract.

Release slots on SQL-callable error paths

Review continued on a patch that releases replication slots when SQL-callable slot functions fail, including subtransaction error paths. Leaked slots under error conditions can exhaust slot capacity. The change improves cleanup for administrative SQL interfaces.

Customizable aarch64 KVM host model

A v9 QEMU series introduces a customizable aarch64 KVM host model with writable ID register fields aimed at migration flexibility. The work adds generated sysreg definitions and QMP updates. Arm virtualization and live-migration users gain finer host model control.

PRODUCT aggregate under PostgreSQL review

Hackers reviewed a patch adding a PRODUCT() aggregate, focusing on performance, overflow behavior, and SQL-standard ON EMPTY syntax. The function would supply a common analytics primitive natively. Application developers needing multiplicative aggregation should watch the thread.