TrustList daily digest

Sunday, 18 October 2026

Everything TrustList published on this day, 5 stories, grouped by subject and each in a line of our own.

News3

1News
PostgreSQL 19 now due on 19 November after late feature reverts
The project had planned an October release. Between eight and ten features, including SQL/PGQ graph queries, were pulled from the branch during beta and move to PostgreSQL 20.
2News
Chrome 158 switches off XSLT for most users on 17 November
Google announced the removal a year ago; the XSLTEnabled enterprise policy and an origin trial keep it working only until Chrome 176, due on 17 August 2027.
3News
DeepSeek prices its web search API at $0.75 per 1,000 calls
Agent tool calls through DeepSeek Harness, Claude Code or Codex already use the new Search and Fetch endpoints for free; per-request billing starts at midnight Beijing time on 1 November.

1Security advisories
PgBouncer 1.26.1 fixes a SCRAM login bypass and two hang bugs
A user who knows one SCRAM password can log in as any other SCRAM user, superusers included, on PgBouncer 1.17.0 to 1.26.0. Two further flaws let unauthenticated clients hang the pooler under specific settings.
2Security advisories
psqlODBC 18.00.0005 fixes heap corruption from oversized parameter lists
Every release from 08.01.0102 to 18.00.0004 is affected. An application that builds IN lists from user input can be crashed, or left running on a corrupted heap.

TrustList Weekly

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.