AWS Security ChangesHomeSearch

AWS AmazonRDS high security documentation change

Service: AmazonRDS · 2025-04-11 · Security-related high

File: AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md

Summary

Added release notes for PostgreSQL 16.8, 15.12, 14.17, and 13.20 versions including security fixes for rds_activity_stream extension, stability enhancements, and new features like Aurora Optimized Reads configuration

Security assessment

Explicit mention of 'Fixed a security issue in the rds_activity_stream extension' in high priority enhancements for all four PostgreSQL versions. This indicates concrete security vulnerability remediation.

Diff

diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md
index 9f0da5825..9eb0855a5 100644
--- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md
+++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md
@@ -160,0 +161,2 @@ In addition, Aurora PostgreSQL doesn't support writebacks and sync operations si
+  * PostgreSQL 16.8
+
@@ -173,0 +176,81 @@ In addition, Aurora PostgreSQL doesn't support writebacks and sync operations si
+### PostgreSQL 16.8
+
+This release of Aurora PostgreSQL is compatible with PostgreSQL 16.8. For more information about the improvements in PostgreSQL 16.8, see [PostgreSQL release 16.8](https://www.postgresql.org/docs/16/release-16-8.html).
+
+###### Releases and patches
+
+  * Aurora PostgreSQL 16.8, April 7th, 2025
+
+
+
+
+#### Aurora PostgreSQL 16.8, April 7th, 2025
+
+**New features**.
+
+  * Aurora Optimized Reads now enables users to resize the allocated space for Optimized Reads-enabled temporary objects on Aurora I/O-Optimized clusters using a dynamic parameter “aurora_temp_space_size”. For more information, see [Aurora Optimized Reads](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.optimized.reads.html).
+
+  * Added support for transforming correlated subquery into derived table to improve execution efficiency. For more information, see [Improving Aurora PostgreSQL query performance using subquery transformation ](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/apg-correlated-subquery.html#apg-corsubquery-transformation).
+
+  * Added support for caching the result of correlated subquery to improve execution efficiency. For more information, see [Using subquery cache to improve Aurora PostgreSQL query performance](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/apg-correlated-subquery.html#apg-subquery-cache).
+
+
+
+
+**Critical stability enhancements**.
+
+  * Improved private memory allocation instrumentation to reduce CPU overhead for compute-heavy workloads that frequently invoke aset and slab allocation calls with `palloc`.
+
+  * When the system is under critical memory pressure for an extended duration, the largest customer backend will be cancelled to prevent system from restarting due to out of memory.
+
+
+
+
+**High priority enhancements**.
+
+  * Fixed an issue where Aurora in-Region failovers would result in failures in database startup.
+
+  * Fixed a security issue in the `rds_activity_stream` extension.
+
+
+
+
+**General enhancements**.
+
+  * Aurora storage metadata now initializes more quickly during unplanned failovers and server restarts, reducing overall downtime. Larger instances benefit the most by leveraging higher parallelism.
+
+  * Improved performance of file metadata operations.
+
+  * Made improvements to database downtime during a `planned` extension switchover for Global Databases.
+
+  * In Blue/Green deployments, creating or modifying temporary objects is no longer classified as restricted DDL.
+
+  * The Blue/Green deployment switchover won’t be blocked by the `REFRESH MATERIALIZED VIEW` statement.
+
+  * Improved allocation of Write-Ahead Log (WAL) stream numbers, resulting in increased throughput for write-heavy workloads on the new Graviton 4 high-end instances.
+
+  * Fixed an issue where the query identifier (queryid) wasn't being correctly updated in pg_stat_activity when using extended protocol in pipeline mode.
+
+  * Fixed an issue in handling of asynchronous I/O cancellation that could cause processes to become stuck indefinitely.
+
+  * Updated the following extensions:
+
+    * Update the `pgvector` extension to 0.8.0.
+
+    * Update the `pg_cron` extension to v1.6.5.
+
+    * Update the `tds_fdw` extension to 2.0.4.
+
+    * Update the `postgis` extension to 3.5.1.
+
+    * Update the `pg_partman` extension to v5.2.4.
+
+    * Update the `orafce` extension to 4.14.0.
+
+    * Update the `rds_tools` extension to 1.9.
+
+    * Update the `rdkit` extension to Release_2024_09_3.
+
+
+
+
@@ -1115,0 +1199,2 @@ For information about extensions and modules, see [Extensions supported for Auro
+  * PostgreSQL 15.12
+
@@ -1134,0 +1220,77 @@ For information about extensions and modules, see [Extensions supported for Auro
+### PostgreSQL 15.12
+
+This release of Aurora PostgreSQL is compatible with PostgreSQL 15.12. For more information about the improvements in PostgreSQL 15.12, see [PostgreSQL release 15.12](https://www.postgresql.org/docs/15/release-15-12.html).
+
+###### Releases and patches
+
+  * PostgreSQL 15.12, April 7th, 2025
+
+
+
+
+#### PostgreSQL 15.12, April 7th, 2025
+
+**New features**
+
+  * Aurora Optimized Reads now enables users to resize the allocated space for Optimized Reads-enabled temporary objects on Aurora I/O-Optimized clusters using a dynamic parameter “aurora_temp_space_size”. For more information. see [Aurora Optimized Reads](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.optimized.reads.html).
+
+
+
+
+**Critical stability enhancements**
+
+  * Improved private memory allocation instrumentation to reduce CPU overhead for compute-heavy workloads that frequently invoke aset and slab allocation calls with `palloc`.
+
+  * When the system is under critical memory pressure for an extended duration, the largest customer backend will be cancelled to prevent system from restarting due to out of memory.
+
+
+
+
+**High priority enhancements**
+
+  * Fixed an issue where Aurora in-Region failovers would result in failures in database startup.
+
+  * Fixed a security issue in the `rds_activity_stream` extension.
+
+
+
+
+**General enhancements**
+
+  * Aurora storage metadata now initializes more quickly during unplanned failovers and server restarts, reducing overall downtime. Larger instances benefit the most by leveraging higher parallelism.
+
+  * Improved performance of file metadata operations.
+
+  * Made improvements to database downtime during a `planned` extension switchover for Global Databases.
+
+  * In Blue/Green deployments, creating or modifying temporary objects is no longer classified as restricted DDL.
+
+  * The Blue/Green deployment switchover won’t be blocked by the `REFRESH MATERIALIZED VIEW` statement.
+
+  * Improved allocation of Write-Ahead Log (WAL) stream numbers, resulting in increased throughput for write-heavy workloads on the new Graviton 4 high-end instances.
+
+  * Fixed an issue where the query identifier (queryid) wasn't being correctly updated in pg_stat_activity when using extended protocol in pipeline mode.
+
+  * Fixed an issue where reader upgrade was taking longer than expected.
+
+  * Updated the following extensions:
+
+    * Update the `pgvector` extension to 0.8.0.
+
+    * Update the `pg_cron` extension to v1.6.5.
+
+    * Update the `tds_fdw` extension to 2.0.4.
+
+    * Update the `postgis` extension to 3.5.1.
+
+    * Update the `pg_partman` extension to v5.2.4.
+
+    * Update the `orafce` extension to 4.14.0.
+
+    * Update the `rds_tools` extension to 1.9.
+
+    * Update the `rdkit` extension to Release_2024_09_3.
+
+
+
+
@@ -2998,0 +3161,2 @@ Due to Aurora's unique distributed storage system, Amazon Aurora PostgreSQL vers
+  * PostgreSQL 14.17
+
@@ -3025,0 +3190,75 @@ Due to Aurora's unique distributed storage system, Amazon Aurora PostgreSQL vers
+### PostgreSQL 14.17
+
+This release of Aurora PostgreSQL is compatible with PostgreSQL 14.17. For more information about the improvements in PostgreSQL 14.17, see [PostgreSQL release 14.17](https://www.postgresql.org/docs/14/release-14-17.html).
+
+###### Releases and patches
+
+  * PostgreSQL 14.17, April 7th, 2025
+
+
+
+
+#### PostgreSQL 14.17, April 7th, 2025
+
+**New features**
+
+  * Aurora Optimized Reads now enables users to resize the allocated space for Optimized Reads-enabled temporary objects on Aurora I/O-Optimized clusters using a dynamic parameter `aurora_temp_space_size`. For more information. see [Aurora Optimized Reads](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.optimized.reads.html).
+
+
+
+
+**Critical stability enhancements**
+
+  * When the system is under critical memory pressure for an extended duration, the largest customer backend will be cancelled to prevent system from restarting due to out of memory.
+
+
+