AI JUST FLUSHED OUT DECADES-OLD RCES IN CORE DATABASES — PATCH POSTGRESQL/MARIADB NOW, EXPECT FASTER PATCH CYCLES
AI-discovered vulnerabilities in PostgreSQL and MariaDB led to urgent patches, and Oracle is moving to monthly fixes as AI speeds up bug discovery. Researchers...
AI-discovered vulnerabilities in PostgreSQL and MariaDB led to urgent patches, and Oracle is moving to monthly fixes as AI speeds up bug discovery.
Researchers used AI-assisted analysis to surface a critical heap overflow in PostgreSQL’s pgcrypto and a MariaDB JSON schema validation overflow, both enabling remote code execution. Patches are out across supported PostgreSQL branches and MariaDB — upgrade immediately. See InfoWorld’s coverage for details on the Postgres/MariaDB fixes and impacted versions PostgreSQL/MariaDB.
Separately, Oracle is shifting to a monthly security cadence (third Tuesday) to keep pace with AI-driven vuln discovery, with cumulative quarterlies still in place Oracle monthly patches. Expect your DB patch windows to get tighter, not looser.
RCE in core DB components is a high-severity, low-latency risk that directly hits data integrity and availability.
AI is accelerating vuln discovery, compressing patch windows and changing ops rhythms for database fleets.
-
terminal
Inventory where pgcrypto (PostgreSQL) and JSON schema validation (MariaDB) parse user-controlled input; reproduce on staging with patched minors.
-
terminal
Run regression/perf and failover drills after patching (replication, backups, extensions rebuilds) to catch edge breakage.
Legacy codebase integration strategies...
- 01.
Plan emergency minor upgrades (PostgreSQL v18.2/17.8/16.12/15.16/14.21+) and MariaDB fixes; coordinate extension whitelists and recompile paths.
- 02.
Harden DB surfaces: disable untrusted languages, restrict extension installs, and add WAF/input validation at ingress to reduce exploit reach.
Fresh architecture paradigms...
- 01.
Prefer managed Postgres/MariaDB with auto-patching and limited extension sets; treat extensions as supply chain artifacts with SBOMs.
- 02.
Bake a monthly DB patch window into SLOs and CI (canary, read-replica first, promote after checks) to match the new cadence.
Get daily POSTGRESQL + SDLC updates.
- Practical tactics you can ship tomorrow
- Tooling, workflows, and architecture notes
- One short email each weekday