Skip to content

postgres: backport bounded-memory vulnerability updates to release-1.5 - #2073

Merged
github-actions[bot] merged 4 commits into
quay:release-1.5from
dcaravel:backport/pr-2002-release-1.5
Nov 2, 2026
Merged

github-actions[bot] merged 4 commits into
quay:release-1.5from
dcaravel:backport/pr-2002-release-1.5

Conversation

@dcaravel

Copy link
Copy Markdown
Contributor

Backports #2002 to release-1.5 to address matcher OOMs observed in StackRox 4.11.x releases.

BradLugo and others added 4 commits October 30, 2026 15:11
Exercise UpdateVulnerabilities with enough alias-carrying
vulnerabilities to cross batch-flush boundaries and verify the link
tables directly. The benchmark reports peak live heap alongside the
usual metrics, since allocation lifetime is invisible to B/op.

Signed-off-by: Brad Lugo <blugo@redhat.com>
Signed-off-by: Hank Donnay <hdonnay@redhat.com>
Change-Id: Id51fc15a093d90e78733e31182a631e86a6a6964
(cherry picked from commit 9e62fba)
The chunked link statements are INSERT..SELECTs that must see alias
rows committed by concurrent updaters after the transaction began, so
pin read committed instead of inheriting
default_transaction_isolation.

Signed-off-by: Brad Lugo <blugo@redhat.com>
Signed-off-by: Hank Donnay <hdonnay@redhat.com>
Change-Id: I462ca8ea288011295a2b3cb92ce8ae636a6a6964
(cherry picked from commit fbb932e)
Signed-off-by: Hank Donnay <hdonnay@redhat.com>
Change-Id: I85a31f5796751b32e698b7b0108461146a6a6964
(cherry picked from commit 1d13564)
Signed-off-by: Hank Donnay <hdonnay@redhat.com>
Change-Id: I7b0aef57f26107254a546add7442b9556a6a6964
(cherry picked from commit 5b55a27)
@dcaravel
dcaravel marked this pull request as ready for review November 2, 2026 21:53
@dcaravel
dcaravel requested review from a team as code owners November 2, 2026 21:53
@dcaravel
dcaravel requested a review from crozzy November 2, 2026 21:53
@dcaravel

dcaravel commented Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

/fast-forward

@github-actions
github-actions Bot merged commit f32f401 into quay:release-1.5 Nov 2, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

4 participants