AWS Security ChangesHomeSearch

AWS AmazonRDS high security documentation change

Service: AmazonRDS · 2025-05-01 · Security-related high

File: AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md

Summary

Added new versions (16.1.7, 15.5.7, etc.) with CVE-2025-1094 fixes and replica connection fixes

Security assessment

Explicitly addresses a security vulnerability (CVE-2025-1094) through backported fixes. The CVE reference indicates a concrete security issue being resolved, making this a security-related update.

Diff

diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md
index 110e38dd1..a5ead66f2 100644
--- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md
+++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md
@@ -1011,0 +1012,2 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.1. For more i
+  * Aurora PostgreSQL 16.1.7, April 22nd, 2025
+
@@ -1026,0 +1029,15 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.1. For more i
+#### Aurora PostgreSQL 16.1.7, April 22nd, 2025
+
+**High priority enhancements**
+
+  * Backported fixes for the following PostgreSQL community security issues:
+
+    * [CVE-2025-1094](https://www.postgresql.org/support/security/CVE-2025-1094/). 
+
+**General enhancements**
+
+  * Fixed an issue on the replica where a network interruption may not correctly re-establish connection with the writer.
+
+
+
+
@@ -2069,0 +2087,2 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 15.5. For more i
+  * Aurora PostgreSQL 15.5.7, April 22nd, 2025
+
@@ -2084,0 +2104,15 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 15.5. For more i
+#### Aurora PostgreSQL 15.5.7, April 22nd, 2025
+
+**High priority enhancements**
+
+  * Backported fixes for the following PostgreSQL community security issues:
+
+    * [CVE-2025-1094](https://www.postgresql.org/support/security/CVE-2025-1094/). 
+
+**General enhancements**
+
+  * Fixed an issue on the replica where a network interruption may not correctly re-establish connection with the writer.
+
+
+
+
@@ -4056,0 +4091,2 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 14.10. For more
+  * Aurora PostgreSQL 14.10.7, April 22nd, 2025
+
@@ -4071,0 +4108,15 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 14.10. For more
+#### Aurora PostgreSQL 14.10.7, April 22nd, 2025
+
+**High priority enhancements**
+
+  * Backported fixes for the following PostgreSQL community security issues:
+
+    * [CVE-2025-1094](https://www.postgresql.org/support/security/CVE-2025-1094/). 
+
+**General enhancements**
+
+  * Fixed an issue on the replica where a network interruption may not correctly re-establish connection with the writer.
+
+
+
+
@@ -7036,0 +7088,2 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 13.13. For more
+  * Aurora PostgreSQL 13.13.7 April 22nd, 2025
+
@@ -7051,0 +7105,15 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 13.13. For more
+#### Aurora PostgreSQL 13.13.7 April 22nd, 2025
+
+**High priority enhancements**
+
+  * Backported fixes for the following PostgreSQL community security issues:
+
+    * [CVE-2025-1094](https://www.postgresql.org/support/security/CVE-2025-1094/). 
+
+**General enhancements**
+
+  * Fixed an issue on the replica where a network interruption may not correctly re-establish connection with the writer.
+
+
+
+