Database
Postgres Extended-Support Options
Postgres extended-support options are commercial services from cloud providers or third-party vendors that provide security patches and technical assistance for PostgreSQL versions that are no longer supported by the community.
Postgres extended-support options are commercial services that provide security patches and technical assistance for PostgreSQL major versions after they have reached their community end-of-life (EOL). The PostgreSQL Global Development Group supports each major version for five years, after which the community no longer provides bug fixes or security patches. This policy makes it critical for organizations to either upgrade to a supported version or secure an alternative support path.
Running an EOL version exposes systems to unpatched security vulnerabilities, compliance risks, and potential operational instability. Organizations have three primary paths forward: upgrading to a community-supported version (the recommended approach), engaging a third-party vendor for specialized EOL support, or utilizing extended support features offered by a managed database provider like AWS or Google Cloud. This guide details the risks and evaluates each of these options to help you make an informed decision.
Latest briefings on Postgres Extended-Support Options
Data
A New Visual Map to Explore Your Database
A new open-source tool provides an interactive map of PostgreSQL's internal data. It helps engineers visually explore complex metrics and system views, simplifying database monitoring and performance analysis for one of the world's most popular databases.
Taranpreet Singh ·
Infra
Google Lets Gemini AI Safely Query Your Data
Google Cloud has launched Data Cloud connectors for Gemini, now in preview. The new feature lets business users ask questions about their company's live data using natural language, while respecting existing security and governance policies.
Ashish Kale ·
Infra
Run Cloud-Scale ML Without Leaving Pandas
Google has integrated its BigQuery ML service directly into the popular Pandas library. This lets developers run powerful AI models on massive datasets in the cloud without ever having to move the data or change tools.
Ashish Kale ·
Security
SonicWall Leaves Old Systems Open to Attack
SonicWall has disclosed critical vulnerabilities in its older Global Management System software but will not issue patches. This forces companies still using the end-of-life product to migrate immediately to avoid potential data exposure and system compromise.
Neeraj Dhiman ·
Data
How to Stop a Rogue Database From Taking Writes
When a Postgres database fails over, the old primary can sometimes keep accepting data, causing corruption. ClickHouse built a system to safely isolate, or "fence," the old server across different cloud and on-premise environments.
Taranpreet Singh ·
Security
Shopify's New Tool Finds Exposed Cloud Services
Shopify has released a new security scanner called Overexposed. It helps teams find Google Kubernetes Engine and Cloud Run services that are unintentionally public, preventing potential data breaches and security risks.
Neeraj Dhiman ·
Security
Postgres Extension Flaw Lets Users Become Superuser
A critical security flaw in the PostgreSQL extension E-Maj allows users to gain superuser privileges. The vulnerability affects all previous versions, and developers are urging an immediate update to version 5.0.1 to patch the issue.
Neeraj Dhiman ·
Security
How AWS Uses AI Agents to Find Linux Flaws
Amazon Web Services is now using AI agents to help triage security vulnerabilities in the Linux kernel. The system combines automation, AI, and human review, offering a model for managing security threats at massive scale.
Neeraj Dhiman ·
Infra
Shrink Cloud SQL Disks With Almost No Downtime
Google's Database Migration Service can now be used for more than just migrations. Engineers can use it to shrink oversized Cloud SQL for SQL Server disks with minimal downtime, a traditionally difficult and disruptive task.
Ashish Kale ·
Infra
AWS Simplifies ECS Networking But Skips Custom Domains
AWS has launched Amazon ECS Gateway to simplify networking for containerized apps. It lets platform teams set up routing once, but the new service currently does not support custom domains for its generated hostnames.
Ashish Kale ·
Infra
OpenSearch Is Finally Becoming a True Community Project
OpenSearch, the AWS-led fork of Elasticsearch, is evolving into a more independent, community-driven project. This shift offers developers a truly open-source alternative for search and analytics, free from single-vendor control.
Ashish Kale ·
Infra
LocalStack for Azure Preview Ignores Security Rules
LocalStack has launched a free public preview of its Azure emulator, letting developers test cloud apps locally. However, the tool currently stores but does not enforce security settings like network rules, creating a potential testing gap.
Ashish Kale ·
Infra
Netflix Now Runs Single Containers on Dedicated VMs
Netflix updated its container platform, Titus, to run single tasks on their own dedicated virtual machines. This significantly boosts security by isolating workloads, a major shift from running many containers on one shared machine.
Ashish Kale ·
Infra
AWS Is Teaching Compilers to Catch AI Errors
An AWS research team is using the Rust compiler to automatically check for errors in code written by AI agents. This novel approach aims to ensure the reliability of AI-generated software for complex distributed systems.
Ashish Kale ·
Data
TimescaleDB Queries Now Run Up to 50% Faster
TimescaleDB is rolling out a new compression method that makes queries up to 50% faster and databases 10% smaller. The new system, called AIC, replaces its previous integer compression algorithm.
Taranpreet Singh ·
Infra
Cloud SQL for MySQL Upgrades Get Near-Zero Downtime
Google Cloud SQL for MySQL now offers blue-green deployments. This lets teams upgrade their databases to new major versions with almost no downtime, eliminating the need for long maintenance windows and complex planning.
Ashish Kale ·
Data
New Tool Catches Broken Supabase Backups Automatically
A new tool called ReviveDB automatically tests every Supabase backup to ensure it can be restored correctly. It checks not just data but the entire database structure, preventing silent failures that could cripple a recovery attempt.
Taranpreet Singh ·
Data
Estuary Now Offers Smarter PostgreSQL Data Recovery
Estuary has updated its PostgreSQL connector, letting developers recover specific slices of data instead of entire tables. This makes fixing data pipeline issues faster and more efficient, reducing the need for costly, full-table re-syncs.
Taranpreet Singh ·
Infra
Move VMware to Google Cloud Without Changing a Thing
Google Cloud has launched a new solution letting you run your VMware workloads on its dedicated bare-metal servers. This allows for a direct "lift and shift" migration, so teams can use their existing tools and skills.
Ashish Kale ·
AI
Google Just Put a Robot's Brain in the Cloud
Google now offers its specialized Gemini model for robotics on Google Cloud. This gives developers cloud-based access to a powerful AI "brain," making it easier to build robots that can think, plan, and adapt to the real world.
Neeraj Dhiman ·
Infra
Your AI Can Now Understand Your Business Data
Google Cloud has integrated its LookML semantic layer with its Knowledge Catalog. This allows AI applications and data teams to automatically discover and understand the business context behind their data, improving governance and the accuracy of insights.
Ashish Kale ·
Infra
A Four-Layer Blueprint for Isolating Cloud Tenants
ReadyOn released a detailed four-layer architecture for isolating tenants on Amazon EKS. This provides a practical blueprint for SaaS companies struggling with security and resource separation in shared Kubernetes environments.
Ashish Kale ·
Data
Safely Test Database Indexes Before You Build Them
A new version of HypoPG, a PostgreSQL extension, is now available. It lets developers see how a new database index would perform without the costly process of actually building it, making performance tuning much safer and faster.
Taranpreet Singh ·
Data
PostgreSQL Tool Simplifies Major Database Upgrades
The latest update to pg_ivm, a PostgreSQL performance tool, simplifies major database upgrades and fixes key data correctness bugs. This makes managing high-performance materialized views more reliable and straightforward for developers and DBAs.
Taranpreet Singh ·
Infra
AWS Claims Its New AI Fixes 89% of Code Bugs
AWS launched an AI security tool called Continuum that it claims can automatically find and fix 89% of code vulnerabilities. The service integrates with code repositories and proposes fixes through pull requests for developers to review.
Ashish Kale ·
Infra
Query Huge Files Without Moving Any Data
Australia's national science agency built a serverless system that queries massive genomic files directly from cloud storage, bypassing a central database. The architecture delivers results in under two seconds, offering a new blueprint for big data processing.
Ashish Kale ·
Infra
AWS Lambda Drops Need for Adapter Libraries
AWS released Lambda Web Functions, a new way to run Node.js web apps. This update removes the need for adapter libraries, simplifying deployments for frameworks like Express and adding support for response streaming and concurrent requests.
Ashish Kale ·
Infra
Smart Cloud Design Saves More Than Rate Deals
A new engineering framework shows that changing your multi-cloud architecture can save far more money than just negotiating better rates. This approach focuses on optimizing service placement and communication to slash hidden data transfer fees.
Ashish Kale ·
Data
A Better Way to Find PostgreSQL Slowdowns
A major update to pgCluu, a free PostgreSQL performance tool, is now available. It helps teams find and fix database slowdowns with new, more detailed reports on disk activity and support for the latest PostgreSQL versions.
Taranpreet Singh ·
Data
How OpenReplay Ditched Postgres for Massive Scale
Observability platform OpenReplay switched from Postgres to ClickHouse to manage billions of daily user events. The new system handles up to 6 TB of data per day on a single server, enabling sub-second analytical queries.
Taranpreet Singh ·
Frequently asked questions
What is the official PostgreSQL EOL policy?
The PostgreSQL community supports each major version for five years from its initial release. After this five-year period, the version is considered end-of-life (EOL) and no longer receives community bug fixes or security patches. For example, PostgreSQL 14, released in September 2021, will reach its EOL in November 2026.
What are the main risks of running an EOL Postgres version?
The primary risk is exposure to unpatched security vulnerabilities, which can lead to data breaches and non-compliance with regulations like PCI DSS or GDPR. You also lose access to community bug fixes, potentially causing database instability, and may face compatibility issues with newer applications or operating systems.
Is extended support from a cloud provider the same as community support?
No, they are different. Extended support from cloud providers, like Amazon RDS Extended Support, is a paid service offering critical security patches and bug fixes for a limited time past the community EOL date. It is designed as a temporary bridge to give you more time to upgrade, not as a long-term replacement for comprehensive community support.
Is upgrading always the best option?
Upgrading to a community-supported major version is the officially recommended and most sustainable path. It ensures you receive all security patches, bug fixes, and new features directly from the community at no extra cost. While extended support is a valuable temporary solution, upgrading is the best long-term strategy for security, stability, and feature access.