PostgreSQL leaks, QEMU single binary, replication logs

PostgreSQL security and replication topics led the day, joined by a large QEMU single-binary proposal and Kubernetes networking API work. Developers tracking database row security, hypervisor packaging, and pod networking will find the threads relevant.

PostgreSQL ON CONFLICT DO SELECT view leak

A security_barrier view issue in PostgreSQL 19 can return rows hidden from INSERT plus ON CONFLICT DO SELECT users. Five participants exchanged eight messages on pgsql-hackers about the leak path. Operators relying on views for row hiding should treat the behavior as a security concern.

QEMU multi-target single-binary patchset

A 114-patch v3 series proposes linking multiple QEMU targets into one qemu-system binary. Four participants discussed widespread symbol, QOM, and TypeInfo changes across 45 messages on qemu-devel. The work would simplify packaging for multi-architecture system emulators.

Logical replication conflict log table

Review continued on a proposal to store logical replication conflict history in a table, surfacing buffer-size and replica-identity bugs. Ten participants produced 64 messages on pgsql-hackers. The change would give operators a durable record of replication conflicts.

Kubernetes pod networkMode KEP refinement

Two participants refined KEP-6317 details for a pod networkMode field and hostNetwork deprecation aimed at API consistency. The exchange covered 23 messages in the kubernetes/enhancements repository. Cluster operators and API consumers should watch the resulting networking configuration model.