postgresql

AWS released ExtendDB v0.1 on May 20, an Apache 2.0 adapter implementing the DynamoDB wire protocol on pluggable backends including PostgreSQL and Apache Cassandra, targeting local dev, CI/CD, on-premises, and hybrid environments.

PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 landed May 14, fixing 11 security flaws and over 60 bugs, with four CVEs rated 8.8.

An integer overflow in PgBouncer's SCRAM packet parser lets unauthenticated attackers crash the pooler, and three more flaws ship in the same release. Debian stable, testing, and pre-release archives are all still vulnerable.

Databricks has made Lakebase generally available on Azure across 14 regions, completing a multi-cloud rollout of its serverless PostgreSQL database built on technology from its Neon and Mooncake Labs acquisitions.

Databricks has made Lakebase, its serverless PostgreSQL database built on acquired Neon technology, generally available on Azure with autoscaling compute, high availability, and compliance certifications across 14 regions.

PostgreSQL 18.3, 17.9, 16.13, 15.17, and 14.22 fix regressions introduced when patching five CVEs, including a broken substring() function on non-ASCII text and standby servers halting mid-replication.

A community revolt over commit drought, staff cuts, and opaque development is forcing Oracle to rethink its stewardship of the world's most deployed open source database.