AWS AmazonRDS high security documentation change

Service: AmazonRDS · 2025-06-22 · Security-related high

File: AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md

Summary

Added multiple security-focused release notes (versions 5.1.1, 4.5.1, 3.9.1, 2.12.1) addressing permission checks in parallel workers and SSL handshake improvements

Security assessment

Explicitly documents security fixes: 1) Patches privilege escalation where non-privileged users could access data (CVE-level vulnerability) 2) SSL handshake improvements prevent potential MITM attacks or connection failures. Direct evidence from 'Security enhancements' section and specific vulnerability descriptions.

Diff

diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md
index 0649301a3..ed0787cc1 100644
--- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md
+++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md
@@ -44,0 +45,16 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.4. For mo
+#### Aurora Babelfish release 5.1.1, June 03, 2025
+
+**Security enhancements**
+
+  * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios.
+
+
+
+
+**Critical stability enhancements**
+
+  * Added support for larger server hello messages during SSL handshake.
+
+
+
+
@@ -193,0 +210,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.8. For mo
+  * Aurora Babelfish release 4.5.1, June 03, 2025
+
@@ -198,0 +217,16 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.8. For mo
+#### **Aurora Babelfish release 4.5.1, June 03, 2025**
+
+**Security enhancements**
+
+  * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios.
+
+
+
+
+**Critical stability enhancements**
+
+  * Added support for larger server hello messages during SSL handshake.
+
+
+
+
@@ -981,0 +1016,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.12. For m
+  * Aurora Babelfish release 3.9.1, June 03, 2025
+
@@ -986,0 +1023,16 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.12. For m
+#### Aurora Babelfish release 3.9.1, June 03, 2025
+
+**Security enhancements**
+
+  * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios.
+
+
+
+
+**Critical stability enhancements**
+
+  * Added support for larger server hello messages during SSL handshake.
+
+
+
+
@@ -2253,0 +2306,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.17. For m
+  * Aurora Babelfish release 2.12.1, June 03, 2025
+
@@ -2258,0 +2313,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.17. For m
+#### **Aurora Babelfish release 2.12.1, June 03, 2025**
+
+**Security enhancements**
+
+  * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios.
+
+
+
+