CVE

This tag is associated with 3 posts

Postgres 18.7 Debian and Redhat Packagers Protect You

Posted by Jeremy ⋅ November 13, 2026 ⋅ 2 Comments

Just a short & quick follow-up to [yesterdays blog] before I run out the door. I hadn’t been paying attention, and yesterday’s postgres release had a few surprises for me. I’m catching up now. First: read [Devrim’s blog] and [Lukas’ 5-minutes-of-postgres] for the TLDR. Second: I had this in yesterday’s blog – “RPM packaging now … Continue reading →

Postgres 18.7 minor breaks ABI compatibility again

Posted by Jeremy ⋅ November 12, 2026 ⋅ 1 Comment

Edit Fri Nov 13 at 8:32am Pacific Time: short & quick follow up [Postgres 18.7 Debian and Redhat Packagers Protect You] Edit 11:54am Pacific Time: just realized Devrim Gunduz published a blog this morning on the same topic. [His blog is better than mine and more thorough]… just start there :) Postgres API and ABI … Continue reading →

Agents Gone Awry on Postgres SBOMs: Start Over

Posted by Jeremy ⋅ September 15, 2026 ⋅ Leave a comment

If you were wondering, it’s the SBOM thing that I mentioned the other day. [Misc Learnings: SBOMs, Provenance and Attestations] Postgres Extensions in containers with full inventory, provenance and attestation. I’ve been using plenty of AI Agents to put this together. This blog is a little scattered (apologies) but as they say, I didn’t have time … Continue reading →