OffNet Newsroom

Daily topic roundup

Database Technology

Sunday, August 23, 2026 · 8 stories, curated & summarized — click any story for the source.

The lo_compat_privileges GUC restores large-object security behavior to the insecure state of PostgreSQL 8.4, where objects lacked owners and were readable by any connected role. Prior to this, version 9.0 introduced owner-based access control lists (ACLs) for large objects. Enabling this setting effectively disables those modern protections.

  • Enabling lo_compat_privileges removes large object ownership and ACLs entirely.
  • Any authenticated role can read, overwrite, or delete large objects in the database.
  • This reverts security to the pre-9.0 era, posing significant data integrity risks.
  • Review configuration files to ensure this GUC is not accidentally enabled in production.
PostgreSQL News database

PostgreSQL apt repo adds Loongson loong64 support

The apt.postgresql.org repository now offers official packages for the Loongson loong64 architecture, with builds running on Loongson 3B6000 hardware. While core PostgreSQL binaries are available, the GIS stack including PostGIS and associated extensions remains pending until the next PostGIS release. This expansion supports the growing ecosystem for Chinese processor architectures.

  • Core PostgreSQL binaries are now available for Loongson loong64 via apt.postgresql.org.
  • GIS extensions like PostGIS are currently excluded due to upstream build dependencies.
  • Build infrastructure relies on Loongson 3B6000 boards provided by the community.
HOW IT WORKSLoongson 64-bit Support Status1Core binaries available now2GIS extensions pending release3Built on 3B6000 boards
AWS Database Blog awsdatabase ↺ since 08-20

AWS: Diagnosing OOM and disk spilling in RDS and Aurora PostgreSQL

PostgreSQL out-of-memory events and excessive disk spilling are frequent production incidents on Amazon RDS and Aurora PostgreSQL. The AWS Database Blog details how PostgreSQL allocates and consumes memory to help engineers identify memory-intensive queries. It provides guidance on diagnosing, preventing, and recovering from OOM events across both database engines.

  • OOM and disk spilling are common production incidents on RDS and Aurora PostgreSQL.
  • Understanding PostgreSQL memory allocation is key to identifying resource-heavy queries.
  • The guide covers diagnosis, prevention, and recovery strategies for OOM events.
  • Techniques apply to both Amazon RDS for PostgreSQL and Amazon Aurora PostgreSQL.

Fleet impact: Review memory-intensive queries on RDS and Aurora PostgreSQL to prevent OOM crashes. Monitor disk spilling metrics to tune work_mem and shared_buffers, ensuring stability for ExaCC/RAC and Aurora fleets.

AWS Database Blog awsdatabase ↺ since 08-19

AWS Aurora PostgreSQL adds binary quantization to pgvector for billion-scale search

Amazon Aurora PostgreSQL now supports binary quantization combined with reranking using HNSW and BQ to handle hundreds of millions or billions of vectors. The update provides practical guidance on index sizing and recall validation to help engineers scale vector search effectively. This approach is positioned as the optimal solution for large-scale vector workloads on the platform.

  • Enables scaling pgvector search to billions of vectors on Aurora PostgreSQL
  • Combines HNSW indexing with binary quantization for efficient storage and speed
  • Provides specific guidance on index sizing and recall validation
  • Best suited for large-scale vector search scenarios requiring high throughput

Fleet impact: For Aurora PostgreSQL fleets, this feature allows you to significantly reduce storage costs and improve query latency for massive vector datasets by switching to binary quantization. Monitor recall rates closely during migration, as BQ trades some precision for efficiency, and validate that your reranking strategy maintains acceptable accuracy for your specific use case.

Percona Blog database ↺ since 08-19

Percona releases gcache-inspector to audit Galera/PXC writeset sizing

Percona introduces gcache-inspector, a tool to analyze Galera and Percona XtraDB Cluster writesets rather than relying on peak-load guesses for cache sizing. Proper capacity planning helps minimize maintenance windows and prevents lengthy state transfers during periods of reduced compute resources. This utility allows DBAs to inspect actual write set characteristics for more accurate configuration.

  • Moves writeset cache sizing from guesswork to data-driven analysis
  • Reduces maintenance downtime by preventing oversized or undersized gcache
  • Avoids expensive state transfers when cluster nodes have limited CPU
  • Provides concrete metrics on actual write set volume and size

Fleet impact: For Oracle ExaCC/RAC, this is irrelevant as it uses ASM/Redo, not Galera. For AWS Aurora PostgreSQL/MySQL, this is not applicable as Aurora uses a separate log storage layer. However, if you manage any on-prem or self-managed Percona XtraDB Cluster (PXC) nodes in your fleet, use this tool to right-size gcache_size to prevent node divergence and long SSTs during patching or scaling events.

Percona Blog database ↺ since 08-21

PMM <=3.9.0 exposes privileged ClickHouse access via Grafana source

Percona disclosed a high-severity vulnerability in PMM versions 3.9.0 and earlier, where the Grafana data source configuration allows unauthorized privileged access to ClickHouse. This flaw effectively bypasses intended access controls, granting attackers elevated privileges within the monitoring stack. Immediate remediation is required to prevent potential data exfiltration or manipulation of monitored metrics.

  • Audit PMM instances running version 3.9.0 or below for immediate patching
  • Review Grafana data source configurations for improper ClickHouse credential exposure
  • Monitor ClickHouse logs for anomalous privileged queries originating from PMM
  • Disable external Grafana access until the vulnerability is fully remediated
CHECKLISTSecure PMM Before PatchingAudit PMM instances running version 3.9.0 or belowReview Grafana data source configurations for ClickHouse exposureMonitor ClickHouse logs for anomalous privileged queriesDisable external Grafana access until vulnerability is remediated

The author argues that the last five years have seen significant storage components like queues, caches, search indexes, and vector stores move into PostgreSQL. The API tier remains separate, but the transactional boundary should resolve operations within the database where authority and provenance already exist. This approach keeps the network edge focused on authentication and adaptation while leveraging PostgreSQL's transactional integrity for every declared outcome.

  • Consolidate storage layers like queues and caches into PostgreSQL to simplify architecture.
  • Keep network edge responsibilities separate from transactional business logic.
  • Ensure every operation outcome is provable within the database transaction.
  • Shift validation and authorization logic into the database layer for consistency.
Planet PostgreSQL database ↺ since 08-22

Postgres Sequence Sync: Why Explicit ID Loads Cause Future Insert Failures

A data load can succeed with correct row counts and foreign keys, yet subsequent application inserts fail with duplicate key errors. This occurs because PostgreSQL sequences do not automatically update when rows are inserted with explicit ID values. The sequence remains out of sync, unaware that the loaded IDs are already in use.

  • Explicit ID inserts bypass sequence updates, causing future auto-generated IDs to collide.
  • Validate sequence state after bulk loads to prevent silent data integrity failures.
  • Use setval() to align sequences with existing table data post-load.
  • Monitor for unique constraint violations immediately after ETL or migration tasks.
HOW IT WORKSSequence Sync Pipeline1Insert rows with explicit IDs2Sequence remains outdated3Next auto-ID collides4Insert fails with error
↑