AWS Security ChangesHomeSearch

AWS AmazonRDS documentation change

Service: AmazonRDS · 2025-07-01 · Documentation medium

File: AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md

Summary

Added release notes for PostgreSQL versions 17.5, 16.9, 15.13, 14.18, and 13.21 with enhancements including stability fixes, performance improvements, Serverless v2 scaling improvements, Zero Downtime Patching fixes, and security-related GUC validation controls

Security assessment

Added validation to restrict predefined GUCs enhances security by preventing unauthorized configuration changes. Updates to pgaudit extensions (security auditing) and fixes for extension-related unavailability (e.g., pg_bigm) improve security posture, but no explicit vulnerabilities are mentioned.

Diff

diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md
index 7828b13be..f9d8e3eea 100644
--- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md
+++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Updates.md
@@ -50,0 +51,2 @@ For a list of AWS Regions, see [ Aurora PostgreSQL Region availability](https://
+  * PostgreSQL 17.5
+
@@ -57,0 +60,102 @@ For a list of AWS Regions, see [ Aurora PostgreSQL Region availability](https://
+### PostgreSQL 17.5
+
+This release of Aurora PostgreSQL is compatible with PostgreSQL 17.5. For more information about the improvements in PostgreSQL 17.5, see [PostgreSQL release 17.5](https://www.postgresql.org/docs/17/release-17-5.html).
+
+###### Releases and patches
+
+  * Aurora PostgreSQL 17.5.1, June 30, 2025
+
+  * Aurora PostgreSQL 17.5, June 30, 2025
+
+
+
+
+#### Aurora PostgreSQL 17.5.1, June 30, 2025
+
+**High priority enhancements**
+
+  * Fixed a performance issue affecting instance restart operations.
+
+  * Fixed an issue where newly created storage volume keys were incorrectly cleaned up causing periodic restarts.
+
+
+
+
+#### Aurora PostgreSQL 17.5, June 30, 2025
+
+**New features**
+
+  * Improved Serverless v2 scaling for storage bound workloads. 
+
+  * Improved Serverless v2 scaling through optimized management of memory maps.
+
+
+
+
+**Critical stability enhancements**
+
+  * Fixed an issue where Serverless instances would fail to perform Zero Downtime Patching after automatic resume.
+
+  * Added library dependency verification during minor and patch upgrades to ensure storage metadata recovery is safe before proceeding.
+
+
+
+
+**High priority enhancements**
+
+  * Fixed an issue in the rds_activity_stream extension that could cause brief periods of unavailability during configuration reloads.
+
+  * Fixed an issue where server will fail to start if a previous startup was prematurely terminated.
+
+
+
+
+**General enhancements**
+
+  * Updated the following extensions:
+
+    * apg_plan_mgmt to 2.9.
+
+    * The `pgaudit` extension to 17.1.
+
+    * The `rdkit` extension to 4.6.1 (2024_09_6).
+
+  * Improvements to make Serverless v2 scaling more efficient on reader nodes.
+
+  * Fixed an issue related to the interactions between out-of-row storage and aborted sub-transactions that could cause issues in logical streaming when aurora.enhanced_logical_replication is enabled.
+
+  * Fixed an issue that prevents Zero Downtime Patching from completing successfully on Serverless v2 auto-pause enabled instances.
+
+  * Fixed an issue in pgdam that causes the engine (with pgdam enabled) to crash when hitting maximum connections.
+
+  * Fixed an issue in the `pg_bigm` extension that can cause unavailability when the extension interacts with the GIN index.
+
+  * In Blue/Green deployments, creating or modifying temporary objects is no longer classified as restricted DDL.
+
+  * Added validation to ensure only predefined GUCs with `aurora_stat_plans` the `prefix` extension are accepted on SET or SHOW commands.
+
+  * Added function aurora_stat_resource_usage() to report current CPU usage, allocated and used memory for all the backends.
+
+  * Fixed an issue which prevented ZDP when cache recovery is disabled.
+
+  * Fixed a synchronization issue where ZDP could fail due to premature engine ready state reporting.
+
+  * Fixed an issue in checkpoint replication to have storage metadata position be consistent in reader.
+
+  * Fixed an issue which causes RO node to restart while it’s reconnecting to RW node.
+
+  * Fixed an issue which causes instability to Zero-ETL integrations due to stale caches in the presence of frequent ALTER TABLE commands.
+
+  * Fixed an issue where RO client process can be stuck in LWLock:BufferIO wait event after being disconnected from the writer.
+
+  * Fixed an issue where RO node could crash when frequently falling behind RW node.
+
+  * Fixed an issue in the `aws_s3` extension that could cause an import operation to restart and reinsert previously inserted rows.
+
+  * Improved performance of EXPLAIN operations for queries involving tables with many columns and complex relations.
+
+  * Added separate GUC `apg_enable_correlated_scalar_index_transform` (OFF by default) to control whether to transform the correlated subquery when the correlated column in the inner table is a leading column of any index.
+
+
+
+
@@ -187 +291 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 17.4. For more i
-    * Update the `pgvector` extension to 0.8.0.
+    * `pgvector` extension to 0.8.0.
@@ -189 +293 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 17.4. For more i
-    * Update the `pg_cron` extension to v1.6.5.
+    * `pg_cron` extension to v1.6.5.
@@ -191 +295 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 17.4. For more i
-    * Update the `tds_fdw` extension to 2.0.4.
+    * `tds_fdw` extension to 2.0.4.
@@ -193 +297 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 17.4. For more i
-    * Update the `postgis` extension to 3.5.1.
+    * `postgis` extension to 3.5.1.
@@ -195 +299 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 17.4. For more i
-    * Update the `pg_partman` extension to v5.2.4.
+    * `pg_partman` extension to v5.2.4.
@@ -197 +301 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 17.4. For more i
-    * Update the `orafce` extension to 4.14.0.
+    * `orafce` extension to 4.14.0.
@@ -199 +303 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 17.4. For more i
-    * Update the `rds_tools` extension to 1.9.
+    * `rds_tools` extension to 1.9.
@@ -201 +305,5 @@ This release of Aurora PostgreSQL is compatible with PostgreSQL 17.4. For more i
-    * Update the `rdkit` extension to Release_2024_09_3.
+    * `rdkit` extension to Release_2024_09_3.
+
+    * pg_repack extension to 1.5.1.
+
+    * pglogical extension to 2.4.5.
@@ -310,0 +419,2 @@ In addition, Aurora PostgreSQL doesn't support writebacks and sync operations si
+  * PostgreSQL 16.9
+
@@ -325,0 +436,104 @@ In addition, Aurora PostgreSQL doesn't support writebacks and sync operations si
+### PostgreSQL 16.9
+
+This release of Aurora PostgreSQL is compatible with PostgreSQL 16.9. For more information about the improvements in PostgreSQL 16.9, see [PostgreSQL release 16.9](https://www.postgresql.org/docs/16/release-16-9.html).
+
+###### Releases and patches
+
+  * Aurora PostgreSQL 16.9.1, June 30, 2025
+
+  * Aurora PostgreSQL 16.9, June 30, 2025
+
+
+
+
+#### Aurora PostgreSQL 16.9.1, June 30, 2025
+
+**High priority enhancements**
+
+  * Fixed a performance issue affecting instance restart operations.
+
+
+
+
+#### Aurora PostgreSQL 16.9, June 30, 2025
+
+**New features**
+
+  * Improved Serverless v2 scaling for storage bound workloads. 
+
+  * Improved Serverless v2 scaling through optimized management of memory maps.
+
+
+
+
+**Critical stability enhancements**
+
+  * Fixed an issue where Serverless instances would fail to perform Zero Downtime Patching after automatic resume.
+
+  * Added library dependency verification during minor and patch upgrades to ensure storage metadata recovery is safe before proceeding.
+
+
+
+
+**High priority enhancements**
+
+  * Fixed an issue in the `rds_activity_stream extension` that could cause brief periods of unavailability during configuration reloads.
+
+  * Fixed an issue where server will fail to start if a previous startup was prematurely terminated.
+
+
+
+
+**General enhancements**
+
+  * Updated the following extensions:
+
+    * apg_plan_mgmt to 2.9.
+
+    * The `pgaudit` extension to 16.1.