Database Technology

pgAdmin 4 version 9.17 is now available, addressing seven distinct security vulnerabilities identified in the CVE-2026-17346 through CVE-2026-17566 range. This update also delivers 28 additional bug fixes and introduces new features such as logging authenticated user identities in HTTP access logs. Key usability improvements include an opt-in Gateway API HTTPRoute template for Helm charts and a configurable row count cap for the View Data action to handle large tables more efficiently.

• Patch immediately to resolve seven critical security vulnerabilities in pgAdmin 4.
• Enable HTTP access log identity tracking for better audit trails and security monitoring.
• Use the new Gateway API HTTPRoute template in Helm charts as an alternative to Ingress.
• Configure row count limits in View Data to prevent performance issues on large tables.

Percona researchers investigating memory allocator performance in Percona Server for MySQL discovered unexpected memory consumption patterns linked to stored procedures. The findings emerged during benchmarking and reveal details that warrant deeper explanation beyond the original performance comparison goals. These results highlight specific memory behaviors that may impact server resource planning.

• Stored procedures exhibit unique memory allocation characteristics in Percona Server for MySQL.
• Memory allocator choices significantly influence observed performance and consumption metrics.
• Benchmarking stored procedures requires accounting for these specific memory overheads.
• Review Percona's detailed analysis to understand the root causes of these memory effects.

PostgreSQL 18 adds a Grand Unified Configuration (GUC) named extension_control_path, allowing extension control and SQL files to reside outside the server's installation directory. This change enables packaging extensions as independent OCI container images that can be mounted at runtime via Kubernetes ImageVolume or Docker volumes. The approach supports decoupling extension versions from the core server image, though its effectiveness depends on the specific extension's architecture and dependencies.

• New GUC extension_control_path decouples extension files from the PostgreSQL server binary tree.
• Enables packaging extensions as standalone OCI containers mounted at runtime in Kubernetes or Docker.
• Reduces server image rebuilds by allowing independent versioning of extensions like pgvector.
• Decoupling benefits vary; complex extensions with deep system integration may not gain value.

AWS Transform for Windows modernization now allows offline source transformation, enabling customers to migrate Microsoft SQL Server databases to Amazon Aurora PostgreSQL without live connections. The service uploads DDL files to assess complexity, converting storage objects via AWS DMS and stored procedures using an agentic interface. This facilitates direct modernization of legacy .NET applications by decoupling schema analysis from active database access.

• Offline migration removes dependency on live SQL Server availability during schema assessment.
• DDL upload enables early complexity analysis for stored procedures and storage objects.
• Agentic tooling assists in converting SQL Server code to Aurora PostgreSQL equivalents.
• Streamlines legacy .NET app modernization by separating schema work from cutover.

The pgBackRest community has released version 2.59.0, a reliable backup and restore solution designed for large databases. This update includes support for parallel backup and restore operations, block incremental backups, and multiple compression types. It also features malware and ransomware protection, per-file checksums, and encryption options.

• Upgrade to pgBackRest 2.59.0 for improved backup performance and reliability.
• Leverage block incremental backups to reduce storage usage and backup times.
• Implement malware and ransomware protection for enhanced security.
• Utilize multiple compression types and encryption for optimized storage.
• Ensure per-file checksums are enabled for data integrity verification.