> But maybe that's because PG 10 and 11 are no longer supported - and not because they aren't affected by the issues.
EOL versions do not recieve security updates and are not verified during security analysis and fixing, so hence they aren't listed. Anyone still running 10 or 11 is encouraged to upgrade to a supported version.
I wonder if MSFT and Oracle test EOL versions of their software for discovered bugs. Maybe, but I doubt it, for the very same reason the PGDG doesn't do it.
But even if they do... how far back would they go? Unless they go back to Windows 1.0, and Oracle 1.0, _someone_ would complain.