AWS AmazonRDS high security documentation change
Summary
Added multiple Aurora Babelfish release notes (versions 4.4.2, 4.3.2, 4.2.3, 4.1.4, 4.0.4, 3.8.2, 3.7.2, 3.6.3, 3.5.4, 3.4.4, 2.11.2, 2.10.2, 2.9.3, 2.8.4, 2.7.4) with security enhancements addressing permission checks in parallel workers
Security assessment
All added release notes explicitly document a security fix where non-privileged users could gain unauthorized read access due to improper permission checks in parallel workers. This directly addresses a privilege escalation vulnerability with concrete impact on data confidentiality.
Diff
diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md index 1c85398c4..f158b4adc 100644 --- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md +++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md @@ -613,0 +614,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.6. For mo + * Aurora Babelfish release 4.4.2, June 24, 2025 + @@ -620,0 +623,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.6. For mo +#### Aurora Babelfish release 4.4.2, June 24, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -732,0 +744,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.4. For mo + * Aurora Babelfish release 4.3.2, July 11, 2025 + @@ -739,0 +753,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.4. For mo +#### Aurora Babelfish release 4.3.2, July 11, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -843,0 +866,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.3. For mo + * Aurora Babelfish release 4.2.3, July 17, 2025 + @@ -852,0 +877,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.3. For mo +#### Aurora Babelfish release 4.2.3, July 17, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -1016,0 +1050,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.2. For mo + * Aurora Babelfish release 4.1.4, July 30, 2025 + @@ -1027,0 +1063,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.2. For mo +#### Aurora Babelfish release 4.1.4, July 30, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -1146,0 +1191,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.1. For mo + * Aurora Babelfish release 4.0.4, August 4, 2025 + @@ -1157,0 +1204,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 16.1. For mo +#### Aurora Babelfish release 4.0.4, August 4, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -1420,0 +1476,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.10. For m + * Aurora Babelfish release 3.8.2, June 24, 2025 + @@ -1427,0 +1485,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.10. For m +#### Aurora Babelfish release 3.8.2, June 24, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -1517,0 +1584,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.8. For mo + * Aurora Babelfish release 3.7.2, July 11, 2025 + @@ -1524,0 +1593,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.8. For mo +#### Aurora Babelfish release 3.7.2, July 11, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -1611,0 +1689,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.7. For mo + * Aurora Babelfish release 3.6.3, July 17, 2025 + @@ -1620,0 +1700,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.7. For mo +#### Aurora Babelfish release 3.6.3, July 17, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -1780,0 +1869,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.6. For mo + * Aurora Babelfish release 3.5.4, July 30, 2025 + @@ -1791,0 +1882,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.6. For mo +#### Aurora Babelfish release 3.5.4, July 30, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -1910,0 +2010,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.5. For mo + * Aurora Babelfish release 3.4.4, August 4, 2025 + @@ -1921,0 +2023,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 15.5. For mo +#### Aurora Babelfish release 3.4.4, August 4, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -2654,0 +2765,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.15. For m + * Aurora Babelfish release 2.11.2, June 24, 2025 + @@ -2661,0 +2774,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.15. For m +#### Aurora Babelfish release 2.11.2, June 24, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -2694,0 +2816,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.13. For m + * Aurora Babelfish release 2.10.2, July 11, 2025 + @@ -2699,0 +2823,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.13. For m +#### Aurora Babelfish release 2.10.2, July 11, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -2734,0 +2867,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.12. For m + * Aurora Babelfish release 2.9.3, July 17, 2025 + @@ -2741,0 +2876,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.12. For m +#### Aurora Babelfish release 2.9.3, July 17, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -2821,0 +2965,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.11. For m + * Aurora Babelfish release 2.8.4, July 30, 2025 + @@ -2828,0 +2974,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.11. For m +#### Aurora Babelfish release 2.8.4, July 30, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + + @@ -2890,0 +3045,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.10. For m + * Aurora Babelfish release 2.7.4, August 4, 2025 + @@ -2897,0 +3054,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 14.10. For m +#### Aurora Babelfish release 2.7.4, August 4, 2025 + +**Security enhancements** + + * Fixed an issue with permission check in parallel worker where non-privileged user may get read access to data in some scenarios. + + + +