AWS AmazonRDS high security documentation change
Summary
Added PostgreSQL 11.9.15 release notes with CVE-2025-1094 backport
Security assessment
Explicitly mentions backporting fixes for PostgreSQL community security issue CVE-2025-1094
Diff
diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md index a5ead66f2..c5ba05606 100644 --- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md +++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md @@ -50,0 +51,2 @@ For a list of AWS Regions, see [ Aurora PostgreSQL Region availability](https:// + * PostgreSQL 17.4 + @@ -55,0 +58,94 @@ For a list of AWS Regions, see [ Aurora PostgreSQL Region availability](https:// +### PostgreSQL 17.4 + +This release of Aurora PostgreSQL is compatible with PostgreSQL 17.4. For more information about the improvements in PostgreSQL 17.4, see [PostgreSQL release 17.4](https://www.postgresql.org/docs/17/release-17-4.html). + +###### Releases and patches + + * Aurora PostgreSQL 17.4.2, May 01, 2025 + + * Aurora PostgreSQL 17.4, May 01, 2025 + + + + +#### Aurora PostgreSQL 17.4.2, May 01, 2025 + +**Critical priority enhancements** + + * Fixed stuck scaling for serverless db instances with ZeroETL enabled. + + * Fixed an issue which can cause the database to become unresponsive when performing actions with Aurora storage. + + + + +#### Aurora PostgreSQL 17.4, May 01, 2025 + +**New features** + + * Aurora Optimized Reads now enables users to resize the allocated space for Optimized Reads-enabled temporary objects on Aurora I/O-Optimized clusters using a dynamic parameter `aurora_temp_space_size`. For more information, see [Aurora Optimized Reads](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.optimized.reads.html). + + * Added support for transforming correlated subquery into derived table to improve execution efficiency. For more information, see [Improving Aurora PostgreSQL query performance using subquery transformation ](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/apg-correlated-subquery.html#apg-corsubquery-transformation). + + * Added support for caching the result of correlated subquery to improve execution efficiency. For more information, see [Using subquery cache to improve Aurora PostgreSQL query performance](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/apg-correlated-subquery.html#apg-subquery-cache). + + + + +**Critical stability enhancements** + + * When the system is under critical memory pressure for an extended duration, the largest customer backend will be cancelled to prevent system from restarting due to out of memory. + + + + +**High priority enhancements** + + * The `rds.force_ssl` parameter is now set to 1 (on) by default in version 17 and newer versions, enforcing SSL connections for enhanced security. For more information, see [Requiring an SSL/TLS connection to an Aurora PostgreSQL DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.Security.html#AuroraPostgreSQL.Security.SSL.Requiring). + + * Fixed an issue where Aurora in-Region failovers would result in failures in database startup. + + * Fixed a security issue in the `rds_activity_stream` extension. + + + + +**General enhancements** + + * Aurora storage metadata now initializes more quickly during unplanned failovers and server restarts, reducing overall downtime. Larger instances benefit the most by leveraging higher parallelism. + + * Improved performance of file metadata operations. + + * Made improvements to database downtime during a `planned` extension switchover for Global Databases. + + * In Blue/Green deployments, creating or modifying temporary objects is no longer classified as restricted DDL. + + * The Blue/Green deployment switchover won’t be blocked by the `REFRESH MATERIALIZED VIEW` statement. + + * Improved allocation of Write-Ahead Log (WAL) stream numbers, resulting in increased throughput for write-heavy workloads on the new Graviton 4 high-end instances. + + * Fixed an issue where the query identifier (queryid) wasn't being correctly updated in pg_stat_activity when using extended protocol in pipeline mode. + + * Fixed an issue in handling of asynchronous I/O cancellation that could cause processes to become stuck indefinitely. + + * Updated the following extensions: + + * Update the `pgvector` extension to 0.8.0. + + * Update the `pg_cron` extension to v1.6.5. + + * Update the `tds_fdw` extension to 2.0.4. + + * Update the `postgis` extension to 3.5.1. + + * Update the `pg_partman` extension to v5.2.4. + + * Update the `orafce` extension to 4.14.0. + + * Update the `rds_tools` extension to 1.9. + + * Update the `rdkit` extension to Release_2024_09_3. + + + + @@ -182 +278,12 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.8. For more i - * Aurora PostgreSQL 16.8, April 7th, 2025 + * Aurora PostgreSQL 16.8.2, May 01, 2025 + + * Aurora PostgreSQL 16.8, April 07, 2025 + + + + +#### Aurora PostgreSQL 16.8.2, May 01, 2025 + +**Critical priority enhancements** + + * Fixed stuck scaling for serverless db instances with ZeroETL enabled. @@ -183,0 +291 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.8. For more i + * Fixed an issue which can cause the database to become unresponsive when performing actions with Aurora storage. @@ -187 +294,0 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.8. For more i -#### Aurora PostgreSQL 16.8, April 7th, 2025 @@ -189 +296,3 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.8. For more i -**New features**. +#### Aurora PostgreSQL 16.8, April 07, 2025 + +**New features** @@ -200 +309 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.8. For more i -**Critical stability enhancements**. +**Critical stability enhancements** @@ -209 +318 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.8. For more i -**High priority enhancements**. +**High priority enhancements** @@ -263 +372 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.6. For more i - * Aurora PostgreSQL 16.6.4, March 24th, 2025 + * Aurora PostgreSQL 16.6.4, March 24, 2025 @@ -265 +374 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.6. For more i - * Aurora PostgreSQL 16.6.3, February 13th 2025 + * Aurora PostgreSQL 16.6.3, February 13, 2025 @@ -267 +376 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.6. For more i - * Aurora PostgreSQL 16.6.2, January 20th, 2025 + * Aurora PostgreSQL 16.6.2, January 20, 2025 @@ -269 +378 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.6. For more i - * Aurora PostgreSQL 16.6.1, December 27th, 2024 + * Aurora PostgreSQL 16.6.1, December 27, 2024 @@ -276 +385 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.6. For more i -#### Aurora PostgreSQL 16.6.4, March 24th, 2025 +#### Aurora PostgreSQL 16.6.4, March 24, 2025 @@ -294 +403 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.6. For more i -#### Aurora PostgreSQL 16.6.3, February 13th 2025 +#### Aurora PostgreSQL 16.6.3, February 13, 2025 @@ -303 +412 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.6. For more i -#### Aurora PostgreSQL 16.6.2, January 20th, 2025 +#### Aurora PostgreSQL 16.6.2, January 20, 2025 @@ -328 +437 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.6. For more i -#### Aurora PostgreSQL 16.6.1, December 27th, 2024 +#### Aurora PostgreSQL 16.6.1, December 27, 2024 @@ -438 +547 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.4. For more i - * Aurora PostgreSQL 16.4.4, April 17th, 2025 + * Aurora PostgreSQL 16.4.4, April 17, 2025 @@ -449 +558 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.4. For more i -#### Aurora PostgreSQL 16.4.4, April 17th, 2025 +#### Aurora PostgreSQL 16.4.4, April 17, 2025 @@ -617 +726 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.3. For more i - * Aurora PostgreSQL 16.3.4, March 25th, 2025 + * Aurora PostgreSQL 16.3.4, March 25, 2025 @@ -630 +739 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.3. For more i -#### Aurora PostgreSQL 16.3.4, March 25th, 2025 +#### Aurora PostgreSQL 16.3.4, March 25, 2025 @@ -804 +913 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.2. For more i - * Aurora PostgreSQL 16.2.5, April 16th, 2025 + * Aurora PostgreSQL 16.2.5, April 16, 2025 @@ -817 +926 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.2. For more i -#### Aurora PostgreSQL 16.2.5, April 16th, 2025 +#### Aurora PostgreSQL 16.2.5, April 16, 2025 @@ -1012 +1121 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.1. For more i - * Aurora PostgreSQL 16.1.7, April 22nd, 2025 + * Aurora PostgreSQL 16.1.7, April 22, 2025 @@ -1014 +1123 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.1. For more i - * Aurora PostgreSQL 16.1.6, February 5th 2025 + * Aurora PostgreSQL 16.1.6, February 5, 2025 @@ -1029 +1138 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.1. For more i -#### Aurora PostgreSQL 16.1.7, April 22nd, 2025 +#### Aurora PostgreSQL 16.1.7, April 22, 2025 @@ -1044 +1153 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 16.1. For more i -#### Aurora PostgreSQL 16.1.6, February 5th 2025 +#### Aurora PostgreSQL 16.1.6, February 5, 2025 @@ -1269 +1378,12 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 15.12. For more - * PostgreSQL 15.12, April 7th, 2025 + * Aurora PostgreSQL 15.12.2, May 01, 2025 + + * Aurora PostgreSQL 15.12, April 07, 2025 + + + + +#### Aurora PostgreSQL 15.12.2, May 01, 2025 + +**Critical priority enhancements** + + * Fixed an issue which can cause the database to become unresponsive when performing actions with Aurora storage. @@ -1274 +1394 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 15.12. For more